GHSA-284H-M62Q-GF8W GitPython: Dormant multi-line git-config values are corrupted into live injected directives (e.g. core.hooksPath) on any unrelated GitConfigParser write, enabling RCE

CWE: CWE-88 Argument Injection / CWE-94 Code Injection — via a read-then-corrupt-on-rewrite config round trip, not a direct setter argument - Affected component: git/config.py — GitConfigParser.read multi-line value decoding, lines 444-541, esp. stringdecode at line 460 and its call sites at...