Lucene search
+L

9 matches found

OSV
OSV
•added 2026/09/10 9:44 a.m.•9 views

PYSEC-2026-3841 GitPython: Arbitrary file read via --pathspec-from-file in IndexFile.remove() and Head.checkout()

Summary IndexFile.remove and Head.checkout forward kwargs into git rm and git checkout with no guard. Passing --pathspec-from-file= together with --pathspec-file-nul makes Git treat the whole file as a single NUL-delimited pathspec, and the unmatched-pathspec error quotes it verbatim. GitPython...

6.5CVSS5.9AI score0.00412EPSS
SaveExploits1References9
Rows per page
Query Builder