Threats tagged 'brew-legit-cve-2026-73622'

GitPython versions prior to 1.2.0.post0_12 contain a vulnerability where environment variables in URLs passed to Repo.create_remote() or Remote.add() are expanded and embedded into the repository configuration. This can lead to sensitive environment variables being written into .git/config and transmitted to attacker-controlled hosts during fetch or pull operations.