Threats tagged 'brew-tach-cve-2026-73623'

GitPython versions before 3.1.54 have an incomplete denylist for unsafe git clone options in the kimi-cli component, omitting the --template option. This omission allows an attacker who can control clone options and stage a malicious hook directory to execute arbitrary OS commands during a git clone operation. A patch is available that adds --template to the denylist to prevent this attack.