GHSA-539M-9XH6-Q6RR GitPython: Incomplete unsafe_git_archive_options denylist omits --add-file / --add-virtual-file, enabling arbitrary file read via Repo.archive()

Target: gitpython-developers/GitPython Tested: HEAD 07e80555 2026-07-25, latest release 3.1.55, git version 2.50.1 Summary Repo.archive does call the option guard, so this is not a missing-guard report. The guard is present and working; the denylist it consults is incomplete. python...