Lucene search
+L

62 matches found

Github Security Blog
Github Security Blog
added 2026/05/08 11:19 p.m.16 views

GitPython: Newline injection in config_writer() section parameter bypasses CVE-2026-42215 patch, enabling RCE via core.hooksPath

Summary The patch for CVE-2026-42215 GitPython 3.1.49 validates newlines only in the value parameter of setvalue. The section and option parameters are passed to configparser without any newline validation. An attacker who controls the section argument can inject \n to write arbitrary section...

8.8CVSS5.9AI score0.00749EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder