Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - GitPython 是用來與 Git 存放庫互動的 python 程式庫。在版本之前 3.1.48，GitPython 中的一個弱點允許攻擊者透過在參照建立、重新命名和刪除作業中對參照路徑的驗證不足，向使用 GitPython 的應用程式提供特製的參照路徑，以寫入、覆寫、移動或刪除存放庫 .git 目錄之外的檔案。此問題已在 3.1.48 版中修正。(CVE-2026-44243)

請注意，Nessus 依賴供應商報告的套件存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - GitPython 是用于与 Git 存储库交互的 Python 库。在低于版本之前 3.1.48的版本中，GitPython 中的漏洞允许攻击者在引用创建、重命名和删除操作中对引用路径的验证不足，向使用 GitPython 的应用程序提供特制引用路径，从而在存储库的 .git 目录外部写入、覆盖、移动或删除文件。已在版本 3.1.48 中修补此问题。(CVE-2026-44243)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - GitPython は、Git リポジトリとのやり取りに使用される python ライブラリです。バージョン 3.1.48より前では、GitPythonの脆弱性により、GitPythonを使用しているアプリケーションに細工された参照パスを提供できる攻撃者が、参照作成、名前の変更、削除操作で参照パスの検証が不十分なことで、リポジトリの.gitディレクトリ外部にファイルの書き込み、上書き、移動、削除を実行する可能性があります。この問題には、バージョン 3.1.48 でパッチが適用されています。(CVE-2026-44243)

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - GitPython is a python library used to interact with Git repositories. Prior to version 3.1.48, a     vulnerability in GitPython allows attackers who can supply a crafted reference path to an application     using GitPython to write, overwrite, move, or delete files outside the repository's .git directory via     insufficient validation of reference paths in reference creation, rename, and delete operations. This     issue has been patched in version 3.1.48. (CVE-2026-44243)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8303-1 advisory.

    Santos Gallegos discovered that GitPython did not properly validate paths when resolving certain Git     references. An attacker could possibly use this issue to cause files outside the .git directory to be     accessed, leading to a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS,     Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2023-41040)

    Wes Ring discovered that GitPython did not properly block certain unsafe Git options when they were     provided as Python keyword arguments. An attacker could possibly use this issue to cause arbitrary command     execution. (CVE-2026-42215)

    It was discovered that GitPython did not properly validate clone options before processing them. An     attacker could possibly use this issue to inject unsafe Git configuration, leading to arbitrary command     execution through Git hooks. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04     LTS, and Ubuntu 26.04 LTS. (CVE-2026-42284)

    It was discovered that GitPython did not properly validate reference paths during reference operations. An     attacker could possibly use this issue to write, overwrite, move, or delete files outside the repository.
    (CVE-2026-44243)

    Dan Aridor discovered that GitPython did not properly validate configuration values before writing them to     Git configuration files. An attacker could possibly use this issue to inject unsafe Git configuration,     leading to arbitrary command execution through Git hooks. (CVE-2026-44244)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
313242	Linux Distros 未修補的弱點：CVE-2026-44243	Nessus	Misc.	2026/5/8	2026/5/27	high
313242	Linux Distros 未修补的漏洞：CVE-2026-44243	Nessus	Misc.	2026/5/8	2026/5/27	high
313242	Linux Distros のパッチ未適用の脆弱性: CVE-2026-44243	Nessus	Misc.	2026/5/8	2026/5/27	high
313242	Linux Distros Unpatched Vulnerability : CVE-2026-44243	Nessus	Misc.	2026/5/8	2026/5/27	high
317096	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : GitPython vulnerabilities (USN-8303-1)	Nessus	Ubuntu Local Security Checks	2026/5/27	2026/5/27	high

检测

插件搜索

high

high

high

high

high