PyPI: hyper-bump-it

CVE-2023-40590

Safety vulnerability ID: SFTY-20230828-34312

Safety legacy ID: pyup.io-60943

Hyper-bump-it 0.5.1 requires 'GitPython' to be version '3.1.34' as minimum, to include a security fix.

PythonPyPINVDNVD
Created at: Jul 5, 2026Updated at: Jul 5, 2026

Overview

Hyper-bump-it 0.5.1 requires 'GitPython' to be version '3.1.34' as minimum, to include a security fix.

Advisory

Hyper-bump-it 0.5.1 requires 'GitPython' to be version '3.1.34' as minimum, to include a security fix.

Affected Package

Affecting hyper-bump-it package, versions<0.5.1

Also affects

---

How to Fix

Upgradehyper-bump-itto0.5.1or higher.

Mitigation and Workarounds

---

Vulnerable Functions

Functions linked to known vulnerabilities.

Vulnerable function data is available for Enterprise customers

Book a call with us to see Safety in action.

References

Safety

Verified by Safety

Our Cybersecurity Intelligence Team reviewed this vulnerability. We combine public data with our own research to find issues not yet reported to public sources.

Learn more