Threats tagged 'brew-legit-cve-2026-73625'

GitPython versions up to 3.1.53 contain a vulnerability in the check_unsafe_options guard that can be bypassed by smuggling a git option token inside the value of a single-character keyword argument. This bypass allows arbitrary OS command execution via the --upload-pack option in all guarded methods such as clone, fetch, and pull. The vulnerability arises because the guard only inspects keyword argument keys, not their values, enabling injection of unsafe options. A fix is available in version 1.2.0.post0_12.