Threats tagged 'brew-mistral-vibe-cve-2026-67324'

GitPython version 3.1.50 contains a vulnerability where the unsafe clone option gate can be bypassed using joined short options such as '-u<helper>'. This bypass allows execution of local commands via Git's upload-pack clone option despite the default protection that blocks unsafe options unless explicitly allowed. The issue arises because the canonicalization of joined short options does not correctly identify them as unsafe, permitting execution of potentially malicious helper commands during cloning.