This appeared in the CVE feed today: https://security.snyk.io/vuln/SNYK-PYTHON-GITPYTHON-3113858 Not sure if this was reported to you before or not, reporting it here just in case.