A vulnerability categorized as problematic has been discovered in gitpython-developers GitPython up to 3.1.x. This affects the function Submodule.move of the component Submodule. Such manipulation leads to path traversal. This vulnerability is listed as CVE-2026-110860. The attack may be performed from remote. There is no available exploit. It is advisable to upgrade the affected component.
Vulnerability
CVE-2026-110860
VulDB
Apply vendor security patch