Threats tagged 'brew-mistral-vibe-cve-2026-73621'

GitPython versions from 2.1.0 up to but not including 2.24.0 contain a vulnerability in the Commit.count() method where unguarded forwarding of keyword arguments to git rev-list allows arbitrary file truncation. Specifically, the --output option can be injected to truncate a specified file to zero bytes, causing integrity and availability impact. This issue is due to missing unsafe option checks in Commit.count(), unlike sibling methods that have such guards. A fix is available in version 2.24.0.