Threats tagged 'brew-legit-cve-2026-76220'

GitPython versions up to 1.2.0.post0_14 contain a vulnerability in the option guard mechanism that allows bypassing the unsafe git option check when using split_single_char_options=False. This bypass enables arbitrary OS command execution via crafted short-option tokens, affecting multiple guarded methods such as clone and fetch. The flaw is an incomplete fix of a previous vulnerability and arises because the guard does not inspect joined short-option tokens emitted when split_single_char_options is False.