GitPython's fdroidserver integration has three methods that omit important safety checks against unsafe protocols and options, leading to potential remote code execution (RCE) and argument injection vulnerabilities. The ls_remote method does not check the URL for unsafe protocols, allowing RCE if the underlying git transport policy permits the 'ext' protocol. The merge_base and IndexFile.move methods forward caller-controlled arguments without proper option checks, exposing latent injection surfaces. These issues affect versions from 0.7.0 up to but not including 2.4.5_7. A fix is available in version 2.4.5_7.