Only the latest version of GitPython can receive security updates. If a vulnerability is discovered, a fix can be issued in a new release.

Please report private portions of a vulnerability to https://github.com/gitpython-developers/GitPython/security/advisories/new. Doing so helps to receive updates and collaborate on the matter, without disclosing it publicliy right away.