A vulnerability was found in gitpython-developers GitPython up to 3.1.x and classified as problematic. This issue affects the function Repo._clone of the component Submodule Update. Executing a manipulation of the argument expand_vars can lead to information disclosure. The identification of this vulnerability is CVE-2026-110855. The attack may be launched remotely. There is no exploit available.
Vulnerability
CVE-2026-110855
VulDB
Apply vendor security patch