CVE-2026-76220

creationtimestamp| type| source ---|---|--- 2026-08-20 08:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtiro7oyye24 2026-09-08 22:35:47+00:00| published-proof-of-concept| https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-wvpp-8hx9-p66j...

DEBIAN-CVE-2026-76220

GitPython before 3.1.58 contains a command execution vulnerability in the checkunsafeoptions guard that can be bypassed by combining a single-character kwarg with splitsinglecharoptions=False. Attackers can supply a crafted kwargs dictionary to guarded methods like clonefrom to emit a joined toke...