Threats tagged 'brew-snowflake-cli-cve-2026-76217'

CVE-2026-76217 is a vulnerability in GitPython versions from 3.4.1 up to but not including 3.25.0. It allows an attacker with limited privileges to read arbitrary files on the system by exploiting how `IndexFile.remove()` and `Head.checkout()` forward unsafe options to underlying git commands. Specifically, using the `--pathspec-from-file` option together with `--pathspec-file-nul` causes git to treat the entire file as a single pathspec, and when the pathspec does not match, the error message includes the full contents of the file. This disclosure of file contents is returned in the error output, enabling arbitrary file read. A fix is available in version 3.25.0.