Threats tagged 'brew-fdroidserver-cve-2026-73625'

GitPython versions up to 3.1.53 contain a vulnerability in the check_unsafe_options guard that can be bypassed by smuggling an unsafe git option token inside the value of a single-character keyword argument. This bypass enables arbitrary OS command execution via the --upload-pack option in all guarded methods such as clone, fetch, pull, and others. The flaw arises because the guard only inspects option keys, not values, allowing crafted values to inject unsafe commands. A proof of concept demonstrates file creation via this method. A fix is available in versions after 3.1.53.