Linux Distros Unpatched Vulnerability : CVE-2026-73619

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitPython before 3.1.57 contains an incomplete denylist in the unsafegitarchiveoptions guard that omits --add-file and --add-virtual-file options. Attackers can...

CVE-2026-73619

GitPython before 3.1.57 contains an incomplete denylist in the unsafegitarchiveoptions guard that omits --add-file and --add-virtual-file options. Attackers can supply these options to Repo.archive to read arbitrary files from the filesystem and include them in the returned archive...

CVE-2026-73619 GitPython before 3.1.57 Arbitrary File Read via Repo.archive()

GitPython before 3.1.57 contains an incomplete denylist in the unsafegitarchiveoptions guard that omits --add-file and --add-virtual-file options. Attackers can supply these options to Repo.archive to read arbitrary files from the filesystem and include them in the returned archive...

CVE-2026-73619

GitPython before 3.1.57 is affected by an incomplete denylist in the unsafe_git_archive_options guard, which omits the --add-file and --add-virtual-file options. This allows an attacker to craft calls to Repo.archive() that can read arbitrary files from the filesystem and include them in the resu...