Threats tagged 'brew-tach-cve-2026-76217'

A vulnerability in GitPython versions before 3.1.58 allows improper validation of options passed to git rm and git checkout commands via the IndexFile.remove() and Head.checkout() methods. This flaw causes Git to treat the entire contents of a user-chosen file as a single pathspec when used with --pathspec-from-file and --pathspec-file-nul options, potentially leaking file contents in error messages. The issue has a medium severity with a CVSS score of 6.5. A patch is available to address this vulnerability.