Threats tagged 'brew-legit-cve-2026-73621'

GitPython versions up to 3.1.53 contain a vulnerability in the Commit.count() method where unguarded forwarding of keyword arguments to git rev-list allows arbitrary file truncation. Specifically, using the output argument causes git rev-list to open and truncate the specified file to zero bytes before processing, enabling destruction of arbitrary files with the process's privileges. This vulnerability has a medium severity impact due to the integrity and availability loss but limited reachability and no content control over the truncation.