Threats Tagged 'ghsa-rw58-wc66-99g4'

1 threat

Threats Tagged 'ghsa-rw58-wc66-99g4'
		Signals				Vote and star
High	7.1	EPSS 0.4%	CVE-2026-87818GitPython · Argument Injection High7.1EPSS 0.4%2026-09-09CVE-2026-87818 GitPython version 3.1.59 contains a vulnerability in its high-level diff API where the --no-index option is not properly restricted. This flaw allows attackers with limited privileges to read arbitrary filesystem paths by using the --no-index option combined with the -I/--ignore-matching-lines flag. This can be exploited as a content-dependent Boolean oracle to extract single-line secrets from local files based on success or error responses. EPSS 0.4%Vulnerability gitpython-developers #ghsa-rw58-wc66-99g4 #brew-dstack-cve-2026-87818 #homebrew 0	CVE Database V5	2026-09-09	0

Showing 1–1 of 1 result

Stop chasing alerts. Route them.

Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.

Pro Console Lifetime · Custom feeds · Automations: email, Slack, webhooks, SIEM/MISP · API access (baseline limits)