Threats tagged 'brew-tach-cve-2026-73621'

GitPython versions up to 3.1.53 contain an argument injection vulnerability in the Commit.count() method. This method improperly forwards unsafe keyword arguments to the underlying git rev-list command without validation. Specifically, the unchecked --output argument can cause git rev-list to open and truncate arbitrary files to zero bytes, leading to potential data loss. The vulnerability has a medium severity rating and a CVSS score of 5.4.