Threats tagged 'brew-cruft-cve-2026-87819'

GitPython versions prior to 3.1.60 contain a Regular Expression Denial of Service (ReDoS) vulnerability in the Actor.name_email_regex pattern used to parse commit author and committer fields. The vulnerable regex causes catastrophic backtracking when processing a commit with an author or committer string containing a long unterminated '<' character, leading to quadratic CPU time growth proportional to input length. This can cause significant CPU exhaustion and denial of service in any system using GitPython to read commit metadata from untrusted repositories.