Threats tagged 'brew-mistral-vibe-cve-2026-69097'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.3	EPSS 0.3%	CVE-2026-69097GitPython · git-config section-name injection enables arbitrary config directives (core.sshCommand RCE) High7.3EPSS 0.3%2026-08-13GCVE DatabaseCVE-2026-69097 GitPython versions up to 3.1.52 contain a vulnerability where attacker-controlled submodule names can inject arbitrary configuration directives into the .git/config file. This occurs because section names are not properly escaped, allowing injection of directives like core.sshCommand, which can lead to remote code execution on the next git operation. The flaw is fixed in version 3.1.53. EPSS 0.3%Report on CVE-2026-69097 Vulnerability #brew-mistral-vibe-cve-2026-69097 #homebrew	GCVE Database	2026-08-13

Page 1 of 1