Threats tagged 'brew-tach-cve-2026-73620'

GitPython versions before 3.1.57 contain vulnerabilities in the IndexFile.checkout() and TagReference.create() methods that allow unsafe forwarding of git command options. This can lead to arbitrary file overwrite and arbitrary file read on the filesystem by an attacker. These issues have a high severity impact and affect multiple versions of GitPython and products bundling it, such as kimi-cli. A patch is available to address these vulnerabilities.