PT-2026-120814

GitPython is a python library used to interact with Git repositories. Prior to 3.2.1, create submodule in git/objects/submodule/base.py accepts an attacker-influenced submodule path such as .git/hooks and invokes clone repo before safely rejecting the destination. In 3.1.x, validate repo path doe...