Symlink Attack

Overview GitPython is a python library used to interact with Git repositories Affected versions of this package are vulnerable to Symlink Attack via Submodule.move in git/objects/submodule/base.py, which validates the destination path only lexically using abspath, commonpath, and relpath, without...