Threats tagged 'brew-shallow-backup-cve-2026-76222'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.4	EPSS 0.4%	CVE-2026-76222shallow-backup · GitPython: Arbitrary Git Repository Creation Outside the Working Tree via Unvalidated .gitmodules Submodule Name in High8.4EPSS 0.4%2026-08-20GCVE DatabaseCVE-2026-76222 GitPython versions prior to 6.6_6 contain a vulnerability where submodule names from a cloned repository's .gitmodules file are not validated. This allows an attacker controlling the repository to specify a submodule name with directory traversal sequences, causing GitPython to create and initialize a full Git repository outside the intended working directory when submodules are initialized. EPSS 0.4%Report on CVE-2026-76222 Vulnerability #brew-shallow-backup-cve-2026-76222 #homebrew	GCVE Database	2026-08-20

Page 1 of 1