Threats tagged 'brew-tach-cve-2026-44243'

A path traversal vulnerability in GitPython prior to version 3.1.48 allows local attackers who can supply crafted reference paths to write, overwrite, move, or delete files outside the repository's .git directory. This occurs due to insufficient validation of reference paths before filesystem operations. The vulnerability impacts integrity and availability by enabling corruption or deletion of important files. A patch is available that enforces repository boundary checks on reference paths.