Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/10/02 6:53 p.m.•34 views

Dulwich: Symlink write-through in checkout(paths=[]) via raw os.open bypasses all symlink protections

Summary Dulwich's porcelain.checkoutpaths=... code path writes files using raw os.openfilepath, OWRONLY|OCREAT|OTRUNC, mode followed by f.writeobj.data. This code path does NOT call buildfilefromblob at all, completely bypassing any symlink protections including the unreleased d09f8af fix. os.ope...

6AI score
SaveExploits0References4Affected Software1
Rows per page
Query Builder