PT-2026-48568

Dulwich is a pure-Python implementation of the Git file formats and protocols. Starting in version 0.23.2 and prior to version 1.2.5, dulwich.porcelain.submodule update, and by extension porcelain.clone..., recurse submodules=True, materializes attacker-controlled submodule paths from a crafted...