Threats tagged 'brew-apm-cve-2026-73624'

GitPython versions up to 3.1.53 contain a vulnerability in the Diffable.diff method that allows arbitrary file overwrite via injection of the git diff --output argument. This occurs because the method forwards keyword arguments directly to git diff commands without validating unsafe options. A patch is available to address this issue by adding proper option checks.