Threats tagged 'brew-tach-cve-2026-76222'

GitPython versions prior to 3.1.58 contain a vulnerability where submodule names from .gitmodules files are not validated. This allows an attacker controlling a cloned repository's .gitmodules to specify path traversal strings, causing GitPython to create Git repositories outside the intended directory during submodule initialization. The issue is similar to a previously fixed Git vulnerability but remains unpatched in GitPython until fixed.