https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T07:30:23.901066+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-73620 CVE-2026-73620 — GitPython before 3.1.57 Arbitrary File Overwrite and Read 2026-10-15T07:30:23.924282+00:00

Affected: gitpython-developers GitPython

GitPython before 3.1.57 fails to guard git option forwarding in IndexFile.checkout() and TagReference.create(), allowing attackers to pass unsafe options via kwargs. Attackers can use --prefix to overwrite arbitrary files with repository content or -F to read arbitrary files returned in-band.