Path Traversal

gitpython is vulnerable to Path Traversal. The vulnerability exists in getrefinfohelper function of symbolic.py because it does not properly validate the local file path, which allows an attacker to access files outside the expected directory...

PT-2023-4955

Name of the Vulnerable Software and Affected Versions GitPython versions prior to 3.1.37 Description The issue is related to GitPython's handling of file paths when resolving git references. In some cases, the library reads files from the .git directory based on user-provided input without checki...