Arbitrary Code Execution

gitpython is vulnerable to Arbitrary Code Execution. The vulnerability is due to an untrusted shell search path used to run the git executable, as well as when it runs bash.exe to interpret hooks. If either of these is used, a malicious .exe file may be executed from an untrusted repository...