Threats tagged 'brew-legit-cve-2026-73623'

GitPython versions up to 3.1.53 have an incomplete denylist for unsafe git clone options that omits the --template option. This omission allows an attacker who can influence clone options and stage a malicious post-checkout hook in a directory to achieve arbitrary OS command execution during repository cloning. The vulnerability arises because git copies and executes hooks from the specified template directory during clone operations, and the default configuration does not block this option.