Lucene search
+L

14 matches found

OSV
OSV
added 2026/07/24 4:42 p.m.5 views

GHSA-R9MR-M37C-5FR3 GitPython: Unsafe git option guard bypass via single-character kwarg value token smuggling enables arbitrary command execution

Summary GitPython's checkunsafeoptions guard the control introduced by CVE-2026-42215 / GHSA-2f96 and hardened since can be bypassed for every guarded method clone/clonefrom, fetch/pull/push, lsremote, itercommits, blame, archive by smuggling an option token inside the VALUE of a single-character...

8.8CVSS6.1AI score
SaveExploits0References5
Rows per page
Query Builder