https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 03:17:15 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-11720 bdu:2026-11720 https://cve.radiocsirt.org/vuln/bdu:2026-11720 https://cve.radiocsirt.org/vuln/brew-aider-cve-2026-73623 <p><strong>Affected:</strong> Homebrew: aider</p> <p>## Summary GitPython&#39;s `unsafe_git_clone_options` denylist omits `--template`. `git clone --template=&lt;dir&gt;` copies `&lt;dir&gt;/hooks/` into the new repository and runs them (`post-checkout` fires during clone), so a caller who can influence clone options can achieve arbitrary command execution in the default `allow_unsafe_options=False` configuration.</p> <p>## Root Cause `base.py:145-152` defines `unsafe_git_clone_options = [&#34;--upload-pack&#34;,&#34;-u&#34;,&#34;--config&#34;,&#34;-c&#34;]` — `--template` is absent. The guard candidate `[&#39;--template&#39;]` passes `check_unsafe_options` (verified). git copies the hook directory and executes `post-checkout` at checkout time. git&#39;s `protocol.allow`/`GIT_ALLOW_PROTOCOL` do not gate `--template`; the incomplete denylist is the only defense.</p> <p>## Impact Arbitrary OS command execution during clone (default config). Requires an attacker-readable directory containing an executable hook — a genuine second precondition (realistic via shared filesystems, upload dirs, `/tmp`, or attacker-writable network paths), reflected as AC:H.</p> <p>## Proof of Concept ```python # attacker stages &lt;dir&gt;/hooks/post-checkout (chmod +x) from git import Repo Repo.clone_from(src, dst, template=&#39;&lt;dir&gt;&#39;) # post-checkout hook executes -&gt; marker created (verified) ```</p> <p>## Attack Chain 1. Setup: attacker stages `&lt;dir&gt;/hooks/post-checkout` (chmod +x). Guard: n/a (filesystem). 2. Entry: `Repo.clone_from(url, path, template=&#39;&lt;dir&gt;&#39;)`. Guard: `check_unsafe_options(candidates=[&#39;--template&#39;], unsafe=unsafe_git_c…</p> <p><strong>Affected:</strong> Homebrew: aider</p> <p>## Summary GitPython&#39;s `unsafe_git_clone_options` denylist omits `--template`. `git clone --template=&lt;dir&gt;` copies `&lt;dir&gt;/hooks/` into the new repository and runs them (`post-checkout` fires during clone), so a caller who can influence clone options can achieve arbitrary command execution in the default `allow_unsafe_options=False` configuration.</p> <p>## Root Cause `base.py:145-152` defines `unsafe_git_clone_options = [&#34;--upload-pack&#34;,&#34;-u&#34;,&#34;--config&#34;,&#34;-c&#34;]` — `--template` is absent. The guard candidate `[&#39;--template&#39;]` passes `check_unsafe_options` (verified). git copies the hook directory and executes `post-checkout` at checkout time. git&#39;s `protocol.allow`/`GIT_ALLOW_PROTOCOL` do not gate `--template`; the incomplete denylist is the only defense.</p> <p>## Impact Arbitrary OS command execution during clone (default config). Requires an attacker-readable directory containing an executable hook — a genuine second precondition (realistic via shared filesystems, upload dirs, `/tmp`, or attacker-writable network paths), reflected as AC:H.</p> <p>## Proof of Concept ```python # attacker stages &lt;dir&gt;/hooks/post-checkout (chmod +x) from git import Repo Repo.clone_from(src, dst, template=&#39;&lt;dir&gt;&#39;) # post-checkout hook executes -&gt; marker created (verified) ```</p> <p>## Attack Chain 1. Setup: attacker stages `&lt;dir&gt;/hooks/post-checkout` (chmod +x). Guard: n/a (filesystem). 2. Entry: `Repo.clone_from(url, path, template=&#39;&lt;dir&gt;&#39;)`. Guard: `check_unsafe_options(candidates=[&#39;--template&#39;], unsafe=unsafe_git_c…</p> https://cve.radiocsirt.org/vuln/brew-aider-cve-2026-73623 https://cve.radiocsirt.org/vuln/euvd-2026-352979 EUVD-2026-352979 https://cve.radiocsirt.org/vuln/euvd-2026-352979 https://cve.radiocsirt.org/vuln/fkie_cve-2026-73623 <p>GitPython before 3.1.54 contains an incomplete denylist in unsafe_git_clone_options that omits --template, allowing attackers to achieve arbitrary command execution during clone operations. Attackers can supply --template pointing to a directory containing malicious post-checkout hooks that execute when git clones the repository.</p> <p>GitPython before 3.1.54 contains an incomplete denylist in unsafe_git_clone_options that omits --template, allowing attackers to achieve arbitrary command execution during clone operations. Attackers can supply --template pointing to a directory containing malicious post-checkout hooks that execute when git clones the repository.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-73623 https://cve.radiocsirt.org/vuln/ghsa-2726-phmx-rc26 <p>GitPython before 3.1.54 contains an incomplete denylist in unsafe_git_clone_options that omits --template, allowing attackers to achieve arbitrary command execution during clone operations. Attackers can supply --template pointing to a directory containing malicious post-checkout hooks that execute when git clones the repository.</p> <p>GitPython before 3.1.54 contains an incomplete denylist in unsafe_git_clone_options that omits --template, allowing attackers to achieve arbitrary command execution during clone operations. Attackers can supply --template pointing to a directory containing malicious post-checkout hooks that execute when git clones the repository.</p> https://cve.radiocsirt.org/vuln/ghsa-2726-phmx-rc26 https://cve.radiocsirt.org/vuln/oesa-2026-3699 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: python-GitPython</p> <p>GitPython is a python library used to interact with git repositories, high-level like git-porcelain, or low-level like git-plumbing. Security Fix(es):</p> <p>GitPython before 3.1.57 contains an incomplete denylist in the unsafe_git_archive_options guard that omits --add-file and --add-virtual-file options. Attackers can supply these options to Repo.archive() to read arbitrary files from the filesystem and include them in the returned archive.(CVE-2026-73619)</p> <p>GitPython before 3.1.57 fails to guard git option forwarding in IndexFile.checkout() and TagReference.create(), allowing attackers to pass unsafe options via kwargs. Attackers can use --prefix to overwrite arbitrary files with repository content or -F to read arbitrary files returned in-band.(CVE-2026-73620)</p> <p>GitPython before 3.1.56 contains an argument injection vulnerability in the Commit.count() method, which forwards keyword arguments to &amp;apos;git rev-list&amp;apos; without the check_unsafe_options guard present in the sibling iter_items method. An attacker who can control options passed to Commit.count (e.g., via an application that forwards a user-supplied options dict) can supply output=&amp;lt;path&amp;gt;, causing &amp;apos;git rev-list --output=&amp;lt;path&amp;gt;&amp;apos; to open and truncate the target file to zero bytes before revision parsing. This allows destruction/blanking of an arbitrary file at the process&amp;apos;s privilege level (no content control, 0-byte truncation).(CVE-2026-73621)</p> <p>GitPython before 3.1.55 fails to disable env…</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: python-GitPython</p> <p>GitPython is a python library used to interact with git repositories, high-level like git-porcelain, or low-level like git-plumbing. Security Fix(es):</p> <p>GitPython before 3.1.57 contains an incomplete denylist in the unsafe_git_archive_options guard that omits --add-file and --add-virtual-file options. Attackers can supply these options to Repo.archive() to read arbitrary files from the filesystem and include them in the returned archive.(CVE-2026-73619)</p> <p>GitPython before 3.1.57 fails to guard git option forwarding in IndexFile.checkout() and TagReference.create(), allowing attackers to pass unsafe options via kwargs. Attackers can use --prefix to overwrite arbitrary files with repository content or -F to read arbitrary files returned in-band.(CVE-2026-73620)</p> <p>GitPython before 3.1.56 contains an argument injection vulnerability in the Commit.count() method, which forwards keyword arguments to &amp;apos;git rev-list&amp;apos; without the check_unsafe_options guard present in the sibling iter_items method. An attacker who can control options passed to Commit.count (e.g., via an application that forwards a user-supplied options dict) can supply output=&amp;lt;path&amp;gt;, causing &amp;apos;git rev-list --output=&amp;lt;path&amp;gt;&amp;apos; to open and truncate the target file to zero bytes before revision parsing. This allows destruction/blanking of an arbitrary file at the process&amp;apos;s privilege level (no content control, 0-byte truncation).(CVE-2026-73621)</p> <p>GitPython before 3.1.55 fails to disable env…</p> https://cve.radiocsirt.org/vuln/oesa-2026-3699 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11566-1 <p>python313-GitPython-3.1.59-2.1 on GA media</p> <p>python313-GitPython-3.1.59-2.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11566-1 https://cve.radiocsirt.org/vuln/pysec-2026-3952 <p><strong>Affected:</strong> PyPI: gitpython</p> <p>GitPython before 3.1.54 contains an incomplete denylist in unsafe_git_clone_options that omits --template, allowing attackers to achieve arbitrary command execution during clone operations. Attackers can supply --template pointing to a directory containing malicious post-checkout hooks that execute when git clones the repository.</p> <p><strong>Affected:</strong> PyPI: gitpython</p> <p>GitPython before 3.1.54 contains an incomplete denylist in unsafe_git_clone_options that omits --template, allowing attackers to achieve arbitrary command execution during clone operations. Attackers can supply --template pointing to a directory containing malicious post-checkout hooks that execute when git clones the repository.</p> https://cve.radiocsirt.org/vuln/pysec-2026-3952 https://cve.radiocsirt.org/vuln/rhsa-2026:63385 <p>jetty: Eclipse Jetty: Information disclosure due to retained HTTP/1.1 trailers across connections ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution ansible-core: argument injection in ansible-galaxy collection install via git clone (incomplete fix for CVE-2026-11332) aiohttp: AIOHTTP: Arbitrary code execution via untrusted input to CookieJar.load() GitPython: GitPython: Arbitrary command execution due to bypass of dangerous Git option checks GitPython: GitPython: Arbitrary code execution via improper validation of clone options GitPython: GitPython: Arbitrary code execution via injected newlines in Git configuration ruby-jwt: ruby-jwt: Authentication bypass due to empty key in HMAC verification jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass com.fasterxml.jackson.core/jackson-core: tools.jackson.core/jackson-core: jackson-core: Denial of Service via incomplete fix in async JSON parser aiohttp: AIOHTTP: HTTP Request Smuggling via WebSocket Upgrade aiohttp: AIOHTTP: Denial of Service via malformed HTTP responses gitpython: GitPython: Arbitrary file overwrite and read via unsafe git option forwarding gitpython: GitPython: Information disclosure via environment variable expansion in URL handling gitpython: GitPython: Remote Code Execution via malicious Git template gitpython: GitPython: Arbitrary File Overwrite via improper git option validation gitpython: GitPython: Remote Code Exec…</p> <p>jetty: Eclipse Jetty: Information disclosure due to retained HTTP/1.1 trailers across connections ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution ansible-core: argument injection in ansible-galaxy collection install via git clone (incomplete fix for CVE-2026-11332) aiohttp: AIOHTTP: Arbitrary code execution via untrusted input to CookieJar.load() GitPython: GitPython: Arbitrary command execution due to bypass of dangerous Git option checks GitPython: GitPython: Arbitrary code execution via improper validation of clone options GitPython: GitPython: Arbitrary code execution via injected newlines in Git configuration ruby-jwt: ruby-jwt: Authentication bypass due to empty key in HMAC verification jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass com.fasterxml.jackson.core/jackson-core: tools.jackson.core/jackson-core: jackson-core: Denial of Service via incomplete fix in async JSON parser aiohttp: AIOHTTP: HTTP Request Smuggling via WebSocket Upgrade aiohttp: AIOHTTP: Denial of Service via malformed HTTP responses gitpython: GitPython: Arbitrary file overwrite and read via unsafe git option forwarding gitpython: GitPython: Information disclosure via environment variable expansion in URL handling gitpython: GitPython: Remote Code Execution via malicious Git template gitpython: GitPython: Arbitrary File Overwrite via improper git option validation gitpython: GitPython: Remote Code Exec…</p> https://cve.radiocsirt.org/vuln/rhsa-2026:63385 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-73623 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: python-git, Ubuntu:Pro:16.04:LTS: python-git, Ubuntu:Pro:18.04:LTS: python-git, Ubuntu:Pro:20.04:LTS: python-git, Ubuntu:Pro:22.04:LTS: python-git, Ubuntu:Pro:24.04:LTS: python-git, Ubuntu:Pro:26.04:LTS: python-git</p> <p>GitPython before 3.1.54 contains an incomplete denylist in unsafe_git_clone_options that omits --template, allowing attackers to achieve arbitrary command execution during clone operations. Attackers can supply --template pointing to a directory containing malicious post-checkout hooks that execute when git clones the repository.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: python-git, Ubuntu:Pro:16.04:LTS: python-git, Ubuntu:Pro:18.04:LTS: python-git, Ubuntu:Pro:20.04:LTS: python-git, Ubuntu:Pro:22.04:LTS: python-git, Ubuntu:Pro:24.04:LTS: python-git, Ubuntu:Pro:26.04:LTS: python-git</p> <p>GitPython before 3.1.54 contains an incomplete denylist in unsafe_git_clone_options that omits --template, allowing attackers to achieve arbitrary command execution during clone operations. Attackers can supply --template pointing to a directory containing malicious post-checkout hooks that execute when git clones the repository.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-73623