29 matches found
gitpython: GitPython: Arbitrary file read vulnerability via `Repo.archive()`
A flaw was found in GitPython. This vulnerability allows an attacker to read arbitrary files from the filesystem. By exploiting an incomplete denylist in the unsafegitarchiveoptions guard, an attacker can supply specific options, such as --add-file or --add-virtual-file, to the Repo.archive...
7.1CVSS6.4AI score0.00412EPSS
SaveExploits1References6
20