CVE-2026-78675

creationtimestamp| type| source ---|---|--- 2026-09-08 20:35:14+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-7833-fr7j-v32q...

SUSE CVE-2026-78675

GitPython before 3.1.59 fails to disable mergeincludes when parsing .gitmodules, allowing attackers to disclose local file content by including arbitrary file paths via include directives. Attackers can craft a malicious .gitmodules file with include directives pointing to sensitive files; when...