Threats tagged 'brew-legit-cve-2026-44243'

GitPython versions up to 3.1.46 and the current main branch (3.1.47 locally) contain a path traversal vulnerability in their reference APIs. This flaw allows attackers who can supply crafted reference paths to write, overwrite, move, or delete files outside the repository's .git directory due to insufficient validation of reference paths during write, rename, and delete operations. The vulnerability requires local access to influence reference names passed to GitPython APIs. It can lead to high integrity and availability impacts by corrupting or deleting arbitrary files accessible by the process.