Threats tagged 'brew-snowflake-cli-cve-2026-76218'

GitPython's Repo.init method forwards keyword arguments directly to git init without guarding unsafe options like --template. This allows an attacker who can control the template argument and stage a malicious hooks directory to plant executable hooks in the new repository. These hooks execute on the next git operation, resulting in arbitrary code execution at the host process privilege level. The vulnerability affects GitPython versions up to 3.1.57 and was fixed in version 3.25.0.