Astra Linux – Vulnerability in python-git

GitPython before version 3.1.55 fails to disable environment variable expansion in Remote.create and Submodule.add URL handling, allowing attackers to exfiltrate secrets by providing URLs that contain variable references. Attackers can create URLs with environment variable tokens that are expande...