Astra Linux – vulnerability in python-git

GitPython versions prior to 3.1.59 fail to disable mergeincludes when parsing .gitmodules, enabling attackers to reveal local file contents by including arbitrary file paths via include directives. Attackers can craft a malicious .gitmodules file containing include directives referencing sensitiv...