GitPython: GitPython 3.1.30 before 3.2.0 Command Injection via Remote.pull() Refspec

A flaw was found in GitPython. This vulnerability allows an attacker to achieve arbitrary code execution on the host system. The issue occurs because the Remote.pull function inspects only keyword arguments for unsafe command options and fails to validate positional repository reference...