Threats tagged 'brew-mistral-vibe-cve-2026-78676'

CVE-2026-78676 is a critical vulnerability in GitPython's GitConfigParser affecting multi-line git-config values. The issue arises from improper re-serialization of multi-line config values read from disk, causing dormant values to be corrupted into live injected directives. This can lead to arbitrary code execution via the core.hooksPath configuration, which is honored by git hook operations. The vulnerability affects GitPython versions from 2.1.0 up to but not including 2.26.0 and is fixed in version 2.26.0.