https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 15:34:59 +0000 https://cve.radiocsirt.org/vuln/cve-2026-73619 <p><strong>Affected:</strong> gitpython-developers GitPython</p> <p>GitPython before 3.1.57 contains an incomplete denylist in the unsafe_git_archive_options guard that omits --add-file and --add-virtual-file options. Attackers can supply these options to Repo.archive() to read arbitrary files from the filesystem and include them in the returned archive.</p> <p><strong>Affected:</strong> gitpython-developers GitPython</p> <p>GitPython before 3.1.57 contains an incomplete denylist in the unsafe_git_archive_options guard that omits --add-file and --add-virtual-file options. Attackers can supply these options to Repo.archive() to read arbitrary files from the filesystem and include them in the returned archive.</p> https://cve.radiocsirt.org/vuln/cve-2026-73619 https://cve.radiocsirt.org/vuln/ghsa-539m-9xh6-q6rr <p><strong>Affected:</strong> PyPI: GitPython</p> <p>**Target:** gitpython-developers/GitPython **Tested:** HEAD `07e80555` (2026-07-25), latest release 3.1.55, `git version 2.50.1`</p> <p>## Summary</p> <p>`Repo.archive()` does call the option guard, so this is not a missing-guard report. The guard is present and working; the **denylist it consults is incomplete**.</p> <p>```python # git/repo/base.py:169 unsafe_git_archive_options = [ # Allows arbitrary command execution through the remote git-upload-archive command. &#34;--exec&#34;, # Writes output to a caller-controlled filesystem path. &#34;--output&#34;, &#34;-o&#34;, ] ```</p> <p>The comment on `--output` states the protected class in the project&#39;s own words: an option that lets the caller name **a filesystem path** is unsafe. `--output` is blocked because it *writes* to a caller-chosen path.</p> <p>`git archive` also accepts `--add-file=&lt;path&gt;` and `--add-virtual-file=&lt;path:content&gt;` (both present in current git; verified against `git version 2.50.1`). `--add-file` *reads* a caller-chosen path — including an absolute path outside the repository — and places the bytes into the archive the caller receives. Neither option is in the list, and no other layer references them:</p> <p>``` $ grep -rniE &#34;add.file|add_file&#34; git/ git/index/base.py:771: R&#34;&#34;&#34;Add files from the working tree, ... # unrelated docstring ```</p> <p>Net effect: the guard blocks arbitrary file **write** at this sink while permitting arbitrary file **read** at the same sink.</p> <p>## Reachability proof (verified at the sink)</p> <p>`poc/poc_addfile.py` at…</p> <p><strong>Affected:</strong> PyPI: GitPython</p> <p>**Target:** gitpython-developers/GitPython **Tested:** HEAD `07e80555` (2026-07-25), latest release 3.1.55, `git version 2.50.1`</p> <p>## Summary</p> <p>`Repo.archive()` does call the option guard, so this is not a missing-guard report. The guard is present and working; the **denylist it consults is incomplete**.</p> <p>```python # git/repo/base.py:169 unsafe_git_archive_options = [ # Allows arbitrary command execution through the remote git-upload-archive command. &#34;--exec&#34;, # Writes output to a caller-controlled filesystem path. &#34;--output&#34;, &#34;-o&#34;, ] ```</p> <p>The comment on `--output` states the protected class in the project&#39;s own words: an option that lets the caller name **a filesystem path** is unsafe. `--output` is blocked because it *writes* to a caller-chosen path.</p> <p>`git archive` also accepts `--add-file=&lt;path&gt;` and `--add-virtual-file=&lt;path:content&gt;` (both present in current git; verified against `git version 2.50.1`). `--add-file` *reads* a caller-chosen path — including an absolute path outside the repository — and places the bytes into the archive the caller receives. Neither option is in the list, and no other layer references them:</p> <p>``` $ grep -rniE &#34;add.file|add_file&#34; git/ git/index/base.py:771: R&#34;&#34;&#34;Add files from the working tree, ... # unrelated docstring ```</p> <p>Net effect: the guard blocks arbitrary file **write** at this sink while permitting arbitrary file **read** at the same sink.</p> <p>## Reachability proof (verified at the sink)</p> <p>`poc/poc_addfile.py` at…</p> https://cve.radiocsirt.org/vuln/ghsa-539m-9xh6-q6rr https://cve.radiocsirt.org/vuln/pysec-2026-3948 <p><strong>Affected:</strong> PyPI: gitpython</p> <p>GitPython before 3.1.57 contains an incomplete denylist in the unsafe_git_archive_options guard that omits --add-file and --add-virtual-file options. Attackers can supply these options to Repo.archive() to read arbitrary files from the filesystem and include them in the returned archive.</p> <p><strong>Affected:</strong> PyPI: gitpython</p> <p>GitPython before 3.1.57 contains an incomplete denylist in the unsafe_git_archive_options guard that omits --add-file and --add-virtual-file options. Attackers can supply these options to Repo.archive() to read arbitrary files from the filesystem and include them in the returned archive.</p> https://cve.radiocsirt.org/vuln/pysec-2026-3948