https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T10:25:55.234174+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-11718 bdu:2026-11718 2026-10-05T10:25:56.002556+00:00 bdu:2026-11718 https://cve.radiocsirt.org/vuln/brew-aider-cve-2026-73619 BREW-aider-CVE-2026-73619 — GitPython: Incomplete unsafe_git_archive_options denylist omits --add-file / --add-virtual-file, enabling arbitrary fil… 2026-10-05T10:25:56.002614+00:00

Affected: Homebrew: aider

**Target:** gitpython-developers/GitPython **Tested:** HEAD `07e80555` (2026-07-25), latest release 3.1.55, `git version 2.50.1`

## Summary

`Repo.archive()` does call the option guard, so this is not a missing-guard report. The guard is present and working; the **denylist it consults is incomplete**.

```python # git/repo/base.py:169 unsafe_git_archive_options = [ # Allows arbitrary command execution through the remote git-upload-archive command. "--exec", # Writes output to a caller-controlled filesystem path. "--output", "-o", ] ```

The comment on `--output` states the protected class in the project's own words: an option that lets the caller name **a filesystem path** is unsafe. `--output` is blocked because it *writes* to a caller-chosen path.

`git archive` also accepts `--add-file=<path>` and `--add-virtual-file=<path:content>` (both present in current git; verified against `git version 2.50.1`). `--add-file` *reads* a caller-chosen path — including an absolute path outside the repository — and places the bytes into the archive the caller receives. Neither option is in the list, and no other layer references them:

``` $ grep -rniE "add.file|add_file" git/ git/index/base.py:771: R"""Add files from the working tree, ... # unrelated docstring ```

Net effect: the guard blocks arbitrary file **write** at this sink while permitting arbitrary file **read** at the same sink.

## Reachability proof (verified at the sink)

`poc/poc_addfile.py` at…

 https://cve.radiocsirt.org/vuln/euvd-2026-352978 EUVD-2026-352978 2026-10-05T10:25:56.002868+00:00 EUVD-2026-352978 https://cve.radiocsirt.org/vuln/fkie_cve-2026-73619 fkie_cve-2026-73619 2026-10-05T10:25:56.002898+00:00

GitPython before 3.1.57 contains an incomplete denylist in the unsafe_git_archive_options guard that omits --add-file and --add-virtual-file options. Attackers can supply these options to Repo.archive() to read arbitrary files from the filesystem and include them in the returned archive.

 https://cve.radiocsirt.org/vuln/ghsa-m3x4-5jfw-2mqc GHSA-m3x4-5jfw-2mqc 2026-10-05T10:25:56.002945+00:00

GitPython before 3.1.57 contains an incomplete denylist in the unsafe_git_archive_options guard that omits --add-file and --add-virtual-file options. Attackers can supply these options to Repo.archive() to read arbitrary files from the filesystem and include them in the returned archive.

 https://cve.radiocsirt.org/vuln/oesa-2026-3699 OESA-2026-3699 — python-GitPython security update 2026-10-05T10:25:56.002982+00:00

Affected: openEuler:24.03-LTS-SP1: python-GitPython

GitPython is a python library used to interact with git repositories, high-level like git-porcelain, or low-level like git-plumbing. Security Fix(es):

GitPython before 3.1.57 contains an incomplete denylist in the unsafe_git_archive_options guard that omits --add-file and --add-virtual-file options. Attackers can supply these options to Repo.archive() to read arbitrary files from the filesystem and include them in the returned archive.(CVE-2026-73619)

GitPython before 3.1.57 fails to guard git option forwarding in IndexFile.checkout() and TagReference.create(), allowing attackers to pass unsafe options via kwargs. Attackers can use --prefix to overwrite arbitrary files with repository content or -F to read arbitrary files returned in-band.(CVE-2026-73620)

GitPython before 3.1.56 contains an argument injection vulnerability in the Commit.count() method, which forwards keyword arguments to &apos;git rev-list&apos; without the check_unsafe_options guard present in the sibling iter_items method. An attacker who can control options passed to Commit.count (e.g., via an application that forwards a user-supplied options dict) can supply output=&lt;path&gt;, causing &apos;git rev-list --output=&lt;path&gt;&apos; to open and truncate the target file to zero bytes before revision parsing. This allows destruction/blanking of an arbitrary file at the process&apos;s privilege level (no content control, 0-byte truncation).(CVE-2026-73621)

GitPython before 3.1.55 fails to disable env…

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11566-1 openSUSE-SU-2026:11566-1 — python313-GitPython-3.1.59-2.1 on GA media 2026-10-05T10:25:56.003174+00:00

python313-GitPython-3.1.59-2.1 on GA media

 https://cve.radiocsirt.org/vuln/pysec-2026-3948 PYSEC-2026-3948 2026-10-05T10:25:56.003231+00:00

Affected: PyPI: gitpython

GitPython before 3.1.57 contains an incomplete denylist in the unsafe_git_archive_options guard that omits --add-file and --add-virtual-file options. Attackers can supply these options to Repo.archive() to read arbitrary files from the filesystem and include them in the returned archive.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-73619 UBUNTU-CVE-2026-73619 2026-10-05T10:25:56.003278+00:00

Affected: Ubuntu:Pro:14.04:LTS: python-git, Ubuntu:Pro:16.04:LTS: python-git, Ubuntu:Pro:18.04:LTS: python-git, Ubuntu:Pro:20.04:LTS: python-git, Ubuntu:Pro:22.04:LTS: python-git, Ubuntu:Pro:24.04:LTS: python-git, Ubuntu:Pro:26.04:LTS: python-git

GitPython before 3.1.57 contains an incomplete denylist in the unsafe_git_archive_options guard that omits --add-file and --add-virtual-file options. Attackers can supply these options to Repo.archive() to read arbitrary files from the filesystem and include them in the returned archive.