Threats tagged 'brew-jiratui-cve-2026-110855'

GitPython's Repo._clone() method improperly expands environment variables in the separate_git_dir parameter derived from attacker-controlled .gitmodules submodule names. This leads to leakage of environment variable values as directory names on disk and in debug logs when cloning and updating submodules from a malicious repository. The vulnerability arises because Git.polish_url() is called without disabling variable expansion on untrusted input, contrary to other similar call sites. This can expose sensitive environment variables persistently on disk and in verbose logs.