Threats tagged 'brew-tach-cve-2026-73622'

GitPython versions before 3.1.55 have a vulnerability in the Repo.create_remote() and Remote.add() methods that allows environment variable expansion in URLs. This can lead to sensitive environment variables being exposed if an attacker supplies a URL containing environment variable references. These references get expanded and stored in Git configuration files and then transmitted to an attacker's server during fetch or pull operations. A patch is available to address this issue.