Threats tagged 'brew-mistral-vibe-cve-2026-76218'

GitPython's Repo.init() method forwards keyword arguments directly to git init without guarding unsafe options such as --template. This allows an attacker who can control the template path to plant malicious git hooks that execute arbitrary code during subsequent git operations. The vulnerability affects GitPython versions from 2.1.0 up to but not including 2.24.3. A fix is available in version 2.24.3 that adds checks to prevent unsafe options.