GHSA-3F7W-8RR8-F37F GitPython: Unguarded git option forwarding in IndexFile.checkout() and TagReference.create() enables arbitrary file overwrite and arbitrary file read

Target: gitpython-developers/GitPython Tested: HEAD 07e80555 2026-07-25, latest release 3.1.55, git version 2.50.1 Reported instances: 2 exploitable, from a sweep of 14 unguarded call sites Summary GitPython blocks dangerous git options through Git.checkunsafeoptions, gated per method by an...

EUVD-2006-0484

Malware in sbrugna...

Buffer overflow

Buffer overflow in git-checkout-index in GIT before 1.1.5 allows remote attackers to execute arbitrary code via an index file with a long symbolic link...

CVE-2006-0477

Buffer overflow in git-checkout-index in GIT before 1.1.5 allows remote attackers to execute arbitrary code via an index file with a long symbolic link...

CVE-2006-0477

Buffer overflow in git-checkout-index in GIT before 1.1.5 allows remote attackers to execute arbitrary code via an index file with a long symbolic link...

CVE-2006-0477

CVE-2006-0477 describes a buffer overflow in Git’s git-checkout-index, affecting Git versions prior to 1.1.5. An attacker could cause remote arbitrary code execution by providing an index file containing a long symbolic link. The vulnerability is triggered during index handling by git-checkout-in...