Lucene search
+L

11 matches found

Github Security Blog
Github Security Blog
added 2026/08/07 3:49 p.m.24 views

GitPython: Unsafe git option guard bypass via split_single_char_options=False short-option token smuggling enables command execution

Summary The checkunsafeoptions guard can be bypassed on every guarded method clone/clonefrom, fetch/pull/push, lsremote, itercommits, blame, archive by combining a single-character kwarg with splitsinglecharoptions=False. The guard's candidate list omits the smuggled option, but transformkwarg...

8.8CVSS5.8AI score0.0057EPSS
SaveExploits1References7Affected Software1
Rows per page
Query Builder