Lucene search
+L

15 matches found

Github Security Blog
Github Security Blog
•added 2026/09/08 6:41 p.m.•32 views

GitPython: clone_from()/clone() omit --separate-git-dir from unsafe_git_clone_options, enabling arbitrary git-directory creation outside the destination

CWE: CWE-73 External Control of File Name or Path / CWE-22 Path Traversal, in the "escapes intended base directory" sense - Affected component: git/repo/base.py, Repo.unsafegitcloneoptions class attribute, lines 153-165 and Repo.clone lines 1477-1520, reached via the public Repo.clonefrom line...

8.7CVSS7.6AI score0.00651EPSS
SaveExploits1References8Affected Software1
Rows per page
Query Builder