Threats tagged 'brew-mistral-vibe-cve-2026-44243'

GitPython versions up to 3.1.46 and the current main branch (3.1.47 locally) contain a path traversal vulnerability in reference APIs that allows attackers to write, overwrite, move, or delete files outside the repository's .git directory. This occurs due to insufficient validation of reference paths during write, rename, and delete operations. Exploitation requires local access to supply crafted reference paths through applications using GitPython. The vulnerability can lead to high integrity and availability impacts by corrupting or deleting arbitrary files accessible to the process.