CVE-2026-73620 in GitPython
要約
〜によって MITRE • 2026年08月13日
GitPython before 3.1.57 fails to guard git option forwarding in IndexFile.checkout() and TagReference.create(), allowing attackers to pass unsafe options via kwargs. Attackers can use --prefix to overwrite arbitrary files with repository content or -F to read arbitrary files returned in-band.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.