Threats Tagged 'ghsa-v396-v7q4-x2qj'
View all threats tagged with 'ghsa-v396-v7q4-x2qj'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ghsa-v396-v7q4-x2qj'
Click on any threat for detailed analysis and mitigation recommendations
GitPython unsafe clone option gate bypass through joined short options 0 GitPython version 3.1.50 contains a vulnerability where the default unsafe option gate intended to block dangerous git clone options does not recognize joined short-option forms such as '-u<value>'. This allows an attacker controlling clone options to bypass the safety check and execute local commands via Git's --upload-pack/-u option. The issue arises because the option canonicalization treats '-u<value>' as a different option name, allowing execution despite allow_unsafe_options being false. The vulnerability affects the PyPI package GitPython at version 3.1.50. Join the discussion | GCVE Database | 07/21/2026, 19:43:14 UTC Added: 07/22/2026, 00:11:47 UTC |
Showing 1 to 1 of 1 result