Lucene search
+L

1 matches found

PyPA
PyPA
added 2026/09/10 9:44 a.m.5 views

GitPython: Unsafe git option guard bypass via split_single_char_options=False short-option token smuggling enables command execution

SummaryThe checkunsafeoptions guard can be bypassed on every guarded method clone/clonefrom, fetch/pull/push, lsremote, itercommits, blame, archive by combining a single-character kwarg with splitsinglecharoptions=False. The guard's candidate list omits the smuggled option, but transformkwarg emi...

8.8CVSS0.0057EPSS
SaveExploits1References9Affected Software1
Rows per page
Query Builder