14 matches found
GHSA-R9MR-M37C-5FR3 GitPython: Unsafe git option guard bypass via single-character kwarg value token smuggling enables arbitrary command execution
Summary GitPython's checkunsafeoptions guard the control introduced by CVE-2026-42215 / GHSA-2f96 and hardened since can be bypassed for every guarded method clone/clonefrom, fetch/pull/push, lsremote, itercommits, blame, archive by smuggling an option token inside the VALUE of a single-character...
8.8CVSS6.1AI score
SaveExploits0References5
20