Threats affecting pkg:brew/snowflake-cli

GitPython's config_writer().set_value() method improperly handles newline characters in configuration values, allowing injection of a malicious core.hooksPath setting. This enables an attacker to redirect Git hook execution to an arbitrary path, potentially leading to remote code execution during Git operations that invoke hooks. The vulnerability affects GitPython versions from 3.4.1 up to but not including 3.18.0 and has a high severity CVSS score of 7.8. A fix is available in version 3.18.0.

This Red Hat Security Advisory addresses multiple vulnerabilities in Red Hat Hardened Images RPMs, specifically in llvm21 and related clang21 packages. The update includes bug fixes and enhancements across numerous RPMs for aarch64 and x86_64 architectures. The vulnerabilities are identified by CVE-2026-67322 and others, with associated CWEs including CWE-214, CWE-88, CWE-78, and CWE-93. The advisory provides updated package versions that fix these issues.

Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, addressing multiple vulnerabilities in LLVM-related packages. The update includes bug fixes and enhancements across various clang, llvm, and related RPMs for aarch64 and x86_64 architectures. The advisory covers several CVEs including CVE-2026-67325. Fixed versions are available for affected packages.

Multiple security vulnerabilities have been identified and fixed in python-GitPython, including command injection, unsafe option validation, path traversal allowing arbitrary file operations outside the repository, and newline injection enabling remote code execution via configuration hooks. These issues affect several versions prior to the fixed releases and pose a high security risk.