CVE-2026-87819
HIGH
NVD
CVSS Score
7.5
Severity
HIGH
Published
Sep 09, 2026
Vendor
unknown
Description
GitPython before 3.1.60 contains a regular expression denial of service vulnerability in Actor.name_email_regex that processes commit author and committer fields. Attackers can craft a commit object with a malformed author field containing an unterminated angle bracket to cause quadratic backtracking, exhausting CPU resources for over two minutes per commit access.