Threats tagged 'brew-tach-cve-2026-73619'

GitPython versions before 3.1.57 have an incomplete denylist in the unsafe_git_archive_options guard that omits the --add-file and --add-virtual-file options. This allows an attacker to read arbitrary files on the filesystem via the Repo.archive() method when used in kimi-cli, exposing sensitive file contents. The vulnerability does not allow code execution. A patch is available to address this issue by extending the denylist or implementing a safer allowlist.