Threats tagged 'brew-mistral-vibe-cve-2026-76220'

GitPython versions up to 2.24.2 contain a vulnerability that allows bypassing the unsafe git option guard when using split_single_char_options=False. This bypass enables arbitrary OS command execution via crafted short-option tokens, affecting multiple guarded methods such as clone, fetch, and push. The flaw is an incomplete fix of a previous vulnerability and arises because the guard does not detect smuggled options emitted as joined tokens. A fix is available in version 2.24.3.