Threats tagged 'brew-legit-cve-2026-73624'

GitPython's Diffable.diff() method allows attacker-controlled arguments to be passed directly to git diff commands without proper validation, enabling arbitrary file overwrite via the --output option. This affects versions up to 3.1.53. An attacker can cause git to write diff output to any file path writable by the process, potentially overwriting critical files such as SSH authorized_keys. A fix is available in version 1.2.0.post0_12 that adds option validation and prevents option injection.