Astra Linux – Vulnerability in python-git

GitPython before version 3.1.58 fails to validate the names of submodules from the .gitmodules file. This allows attackers to create Git repositories at arbitrary filesystem paths outside of the intended clone directory. Attackers can create malicious repositories with traversal sequences in the...