Threats tagged 'brew-legit-cve-2026-67323'

GitPython versions prior to 1.2.0.post0_11 contain command injection vulnerabilities in the Repo.archive(), git.ls_remote(), and other arbitrary git command invocations. These flaws allow untrusted input to inject and execute arbitrary commands via unsafe handling of Git options such as --exec and upload-pack. Additionally, certain Git commands can truncate arbitrary files if malicious revision strings are passed. These issues were fixed in version 1.2.0.post0_11.