Threats tagged 'brew-snowflake-cli-cve-2026-73623'

GitPython versions up to 3.1.53 have an incomplete denylist for unsafe git clone options that omits the --template option. This omission allows an attacker who can influence clone options and stage a malicious post-checkout hook in a directory to achieve arbitrary OS command execution during a git clone operation. The vulnerability requires the attacker to have write access to a directory containing executable hooks, which git copies and executes during the clone process. A fix is available in version 3.24.0.