Threats tagged 'brew-shallow-backup-cve-2026-87819'

GitPython versions prior to the fix contain a Regular Expression Denial of Service (ReDoS) vulnerability in the Actor.name_email_regex pattern used to parse commit author and committer fields. This regex can cause catastrophic backtracking when processing a commit with a long string containing an unterminated '<' character, leading to CPU exhaustion proportional to the square of the input length. This can block GitPython API calls that access commit author or committer metadata for extended periods, impacting CI runners, code-hosting backends, and repository scanning tools that process untrusted commits.