Lucene search
+L

1 matches found

osv_ghsa
osv_ghsa
•added 2026/07/24 4:42 p.m.•24 views

GHSA-R9MR-M37C-5FR3 GitPython: Unsafe git option guard bypass via single-character kwarg value token smuggling enables arbitrary command execution

Summary GitPython's checkunsafeoptions guard the control introduced by CVE-2026-42215 / GHSA-2f96 and hardened since can be bypassed for every guarded method clone/clonefrom, fetch/pull/push, lsremote, itercommits, blame, archive by smuggling an option token inside the VALUE of a single-character...

8.8CVSS7.7AI score0.00749EPSS
SaveExploits2References5
Rows per page
Query Builder