tach

GitPython versions from 0.19.7 up to but not including 0.35.0_3 contain unguarded forwarding of git command options in certain API methods. This allows arbitrary file overwrite via the IndexFile.checkout() method using the --prefix option of git checkout-index, and arbitrary file read via TagReference.create() using the -F/--file option of git tag. Both vulnerabilities arise because these methods forward **kwargs directly to git commands without checking for unsafe options, enabling repository-controlled content to overwrite arbitrary files or read arbitrary files on the filesystem. A fix is available in version 0.35.0_3.

GitPython: Unguarded git option forwarding in IndexFile.checkout() and TagReference.create() enables arbitrary file…

snowflake-cli

GitPython contains unguarded forwarding of git command options in the methods IndexFile.checkout() and TagReference.create(), allowing arbitrary file overwrite and arbitrary file read respectively. The checkout() method forwards unsafe options to git checkout-index, enabling an attacker to overwrite files anywhere on the filesystem with repository-controlled content via the --prefix option. The TagReference.create() method forwards unsafe options to git tag, allowing an attacker to read arbitrary files on the filesystem via the -F/--file option. Both issues are present in versions from 3.4.1 up to but not including 3.24.0 and have been fixed in version 3.24.0. The CVSS score is 8.1 (high severity).

snakemake

GitPython versions from 5.5.3 up to but not including 9.24.0 contain unguarded forwarding of git command options in certain API methods, allowing arbitrary file overwrite and arbitrary file read. Specifically, the IndexFile.checkout() method forwards unsafe options to 'git checkout-index' enabling an attacker to overwrite arbitrary files with repository-controlled content via the --prefix option. The TagReference.create() method forwards unsafe options to 'git tag' allowing an attacker to read arbitrary files via the -F/--file option. These vulnerabilities arise because the methods do not invoke the internal safety checks that block dangerous git options. A fix is available in version 9.24.0.

shallow-backup

GitPython contains unguarded forwarding of git command options in two methods, IndexFile.checkout() and TagReference.create(), allowing arbitrary file overwrite and arbitrary file read respectively. The checkout method forwards unsafe options to git checkout-index, enabling an attacker to overwrite files anywhere on the filesystem with repository-controlled content via the --prefix option. The TagReference.create method forwards unsafe options to git tag, allowing reading of arbitrary files via the -F/--file option, returning their contents in-band. Both issues are present in the latest release and HEAD as of the report date. A fix is available in version 6.6_5.

otterdog

GitPython contains unguarded forwarding of git command options in the IndexFile.checkout() and TagReference.create() methods, allowing arbitrary file overwrite and arbitrary file read respectively. The checkout method forwards unsafe options to git checkout-index without validation, enabling an attacker to overwrite files outside the repository with repository-controlled content. The TagReference.create method forwards unsafe options to git tag, allowing reading of arbitrary files on the filesystem. These vulnerabilities are present in versions >=1.0.1 <1.4.0_1 and have been fixed in version 1.4.0_1.

opentimestamps-client

GitPython contains unguarded forwarding of git command options in the methods IndexFile.checkout() and TagReference.create(), allowing arbitrary file overwrite and arbitrary file read respectively. The checkout method forwards unsafe options to git checkout-index, enabling an attacker to overwrite files anywhere writable by the process using the --prefix option. The TagReference.create method forwards unsafe options to git tag, allowing reading arbitrary files via the -F/--file option, with contents returned in-band. These issues remain present at the latest HEAD and release 3.1.55. A fix is available in version 0.7.2_5 of the affected product.

nbdime

GitPython versions before 4.0.4_6 contain unguarded forwarding of git command options in the IndexFile.checkout() and TagReference.create() methods. This allows an attacker with repository write access to cause arbitrary file overwrites outside the repository via the --prefix option in checkout-index, or to read arbitrary files on the system via the -F/--file option in git tag. Both issues arise because these methods forward **kwargs directly to git commands without proper safety checks. A fix is available in version 4.0.4_6.

mistral-vibe

GitPython versions from 2.1.0 up to but not including 2.24.0 contain unguarded forwarding of git command options in certain API methods, allowing arbitrary file overwrite and arbitrary file read. Specifically, the IndexFile.checkout() method forwards unsafe options to git checkout-index, enabling an attacker to overwrite files anywhere on the filesystem with repository-controlled content. The TagReference.create() method forwards unsafe options to git tag, allowing reading of arbitrary files on the filesystem and returning their contents in-band. These vulnerabilities are rated high severity due to the potential for arbitrary file overwrite leading to code execution and unauthorized file disclosure. A fix is available in GitPython version 2.24.0.

GitPython versions prior to 3.0.0_12 contain unguarded forwarding of git command options in IndexFile.checkout() and TagReference.create(), allowing arbitrary file overwrite and arbitrary file read respectively. The checkout method forwards unsafe options to git checkout-index, enabling an attacker to overwrite files anywhere on the filesystem with repository-controlled content via the --prefix option. The TagReference.create method forwards unsafe options to git tag, allowing reading of arbitrary files via the -F/--file option, with contents returned in-band. These vulnerabilities are present in version 3.0.0 up to but not including 3.0.0_12 and have been fixed in 3.0.0_12.

legit

GitPython versions before 1.2.0.post0_13 contain unguarded forwarding of git command options in IndexFile.checkout() and TagReference.create(), allowing arbitrary file overwrite and arbitrary file read respectively. The checkout method forwards unsafe options to git checkout-index, enabling an attacker to overwrite files anywhere writable by the process using the --prefix option. The tag creation method forwards unsafe options to git tag, allowing reading arbitrary files via the -F/--file option. Both issues arise from missing safety checks on forwarded kwargs. A fix is available in version 1.2.0.post0_13.

gitup

GitPython contains vulnerabilities in two methods that forward unguarded git command options, allowing arbitrary file overwrite and arbitrary file read. The IndexFile.checkout() method forwards unsafe options to git checkout-index, enabling an attacker to overwrite arbitrary files on the filesystem with repository-controlled content by abusing the --prefix option. The TagReference.create() method forwards unsafe options to git tag, allowing an attacker to read arbitrary files on the system via the -F/--file option, with contents returned in-band. These issues are present in versions >=0.2.3 and fixed in 0.5.2_5.

fdroidserver

GitPython versions >=0.7.0 and <2.4.5_3 contain vulnerabilities in the IndexFile.checkout() and TagReference.create() methods that allow unguarded forwarding of git command options. This enables arbitrary file overwrite via the --prefix option in git checkout-index and arbitrary file read via the -F/--file option in git tag. Both vulnerabilities allow an attacker with repository write access to influence file system operations outside the repository, potentially leading to code execution or sensitive file disclosure.

cruft

GitPython versions from 2.9.0 up to but not including 2.16.0_13 contain unguarded forwarding of git command options in IndexFile.checkout() and TagReference.create(), allowing arbitrary file overwrite and arbitrary file read respectively. The checkout method forwards unsafe options to git checkout-index, enabling an attacker to overwrite files anywhere writable by the process with repository-controlled content via the --prefix option. The tag creation method forwards unsafe options to git tag, allowing reading of arbitrary files via the -F/--file option, with contents returned in-band. These issues are due to missing checks for unsafe options and lack of allow_unsafe_options gating. A fix is available in version 2.16.0_13.

conda-lock

GitPython versions prior to 4.0.2_4 contain unguarded forwarding of git command options in IndexFile.checkout() and TagReference.create(), allowing arbitrary file overwrite and arbitrary file read respectively. The checkout method forwards unsafe options to git checkout-index, enabling an attacker to overwrite files anywhere on the filesystem with repository-controlled content via the --prefix option. The tag creation method forwards unsafe options to git tag, allowing reading of arbitrary files via the -F/--file option, with the file contents returned in-band. These issues are due to missing safety checks on forwarded kwargs and are rated high severity.

cf2tf

GitPython versions from 0.6.1 up to but not including 0.9.2_7 contain unguarded forwarding of git command options in two methods, allowing arbitrary file overwrite and arbitrary file read. The IndexFile.checkout() method forwards unsafe options to git checkout-index, enabling an attacker to overwrite files anywhere writable by the process with repository-controlled content. The TagReference.create() method forwards unsafe options to git tag, allowing reading arbitrary files on the filesystem and returning their contents in-band. These issues are present at HEAD but fixed in version 0.9.2_7.

gitpython

GitPython before 3.1.57 fails to guard git option forwarding in IndexFile.checkout() and TagReference.create(), allowing attackers to pass unsafe options via kwargs. Attackers can use --prefix to overwrite arbitrary files with repository content or -F to read arbitrary files returned in-band.

Search: CVE-2026-73620