Threats tagged 'brew-jiratui-cve-2026-110859'

GitPython versions up to 3.1.62 contain a vulnerability in the Head.checkout() method where an attacker-controlled branch name can be used to perform an arbitrary file read. This occurs because the branch name is passed as a positional argument to git checkout without proper sanitization or argument separation, allowing injection of git options such as --pathspec-from-file. An attacker who can cause the application to clone a repository they control with a malicious default branch name can exploit this to read any file accessible to the application process, such as /etc/passwd. The vulnerability is a partial regression of previous fixes and affects all published releases up to 3.1.62 and the main branch at commit 4905b4af.