CVE-2026-78678

A flaw was found in GitPython. An incomplete denylist in the unsafegitrevisionoptions guard omits --contents and -S options. This allows an attacker to read arbitrary files by passing these options to the Repo.blame function. This can lead to information disclosure, as attackers can supply revisi...