https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 11:33:42 +0000 https://cve.radiocsirt.org/vuln/brew-aider-cve-2026-78679 <p><strong>Affected:</strong> Homebrew: aider</p> <p>## Summary `TagReference.create()` forwards a caller-influenced positional `reference` value into `git tag` without it ever being inspected by the unsafe-option guard, allowing an arbitrary file read (the file&#39;s contents are returned in-band as the annotated tag message). This is an incomplete-fix bypass of commit `3af0c251` (the fix for GHSA-3f7w-8rr8-f37f&#39;s tag instance).</p> <p>## Root Cause The fix `3af0c251` added `unsafe_git_tag_options = [&#34;--file&#34;,&#34;-F&#34;]` and a guard call, but the guard is `Git.check_unsafe_options(options=Git._option_candidates([], kwargs), unsafe_options=...)` at `git/refs/tag.py:139` — it passes an EMPTY args list and inspects **kwargs only**. The dangerous values `path` and `reference` are POSITIONALS (`args = (path, reference)`, tag.py:156), placed before any `--`. A user-influenced `reference=&#34;--file=&lt;path&gt;&#34;` therefore reaches `git tag` as the exact `--file` option the fix intended to block, creating an annotated tag whose message is the file&#39;s contents.</p> <p>## Impact Arbitrary local file read at the privileges of the host process; contents returned in-band via `tagref.tag.message`. Requires the embedding application to forward a caller-influenced `reference` value into `TagReference.create()` (pure VALUE control — the CVE-2026-42215 threat model). Default `allow_unsafe_options=False`.</p> <p>## Proof of Concept ```python from git import TagReference t = TagReference.create(repo, &#34;vpwn&#34;, reference=&#34;--file=/home/app/.ssh/id_rsa&#34;) print(t.tag.message) # content…</p> <p><strong>Affected:</strong> Homebrew: aider</p> <p>## Summary `TagReference.create()` forwards a caller-influenced positional `reference` value into `git tag` without it ever being inspected by the unsafe-option guard, allowing an arbitrary file read (the file&#39;s contents are returned in-band as the annotated tag message). This is an incomplete-fix bypass of commit `3af0c251` (the fix for GHSA-3f7w-8rr8-f37f&#39;s tag instance).</p> <p>## Root Cause The fix `3af0c251` added `unsafe_git_tag_options = [&#34;--file&#34;,&#34;-F&#34;]` and a guard call, but the guard is `Git.check_unsafe_options(options=Git._option_candidates([], kwargs), unsafe_options=...)` at `git/refs/tag.py:139` — it passes an EMPTY args list and inspects **kwargs only**. The dangerous values `path` and `reference` are POSITIONALS (`args = (path, reference)`, tag.py:156), placed before any `--`. A user-influenced `reference=&#34;--file=&lt;path&gt;&#34;` therefore reaches `git tag` as the exact `--file` option the fix intended to block, creating an annotated tag whose message is the file&#39;s contents.</p> <p>## Impact Arbitrary local file read at the privileges of the host process; contents returned in-band via `tagref.tag.message`. Requires the embedding application to forward a caller-influenced `reference` value into `TagReference.create()` (pure VALUE control — the CVE-2026-42215 threat model). Default `allow_unsafe_options=False`.</p> <p>## Proof of Concept ```python from git import TagReference t = TagReference.create(repo, &#34;vpwn&#34;, reference=&#34;--file=/home/app/.ssh/id_rsa&#34;) print(t.tag.message) # content…</p> https://cve.radiocsirt.org/vuln/brew-aider-cve-2026-78679 https://cve.radiocsirt.org/vuln/cve-2026-78679 <p><strong>Affected:</strong> gitpython-developers GitPython</p> <p>GitPython before 3.1.59 contains an arbitrary file read vulnerability in TagReference.create() where a positional reference parameter bypasses the unsafe option guard. Attackers can supply a reference value like --file=&lt;path&gt; to read arbitrary files, with contents returned in the annotated tag message.</p> <p><strong>Affected:</strong> gitpython-developers GitPython</p> <p>GitPython before 3.1.59 contains an arbitrary file read vulnerability in TagReference.create() where a positional reference parameter bypasses the unsafe option guard. Attackers can supply a reference value like --file=&lt;path&gt; to read arbitrary files, with contents returned in the annotated tag message.</p> https://cve.radiocsirt.org/vuln/cve-2026-78679 https://cve.radiocsirt.org/vuln/ghsa-3wxw-xv34-2frg <p><strong>Affected:</strong> PyPI: GitPython</p> <p>## Summary `TagReference.create()` forwards a caller-influenced positional `reference` value into `git tag` without it ever being inspected by the unsafe-option guard, allowing an arbitrary file read (the file&#39;s contents are returned in-band as the annotated tag message). This is an incomplete-fix bypass of commit `3af0c251` (the fix for GHSA-3f7w-8rr8-f37f&#39;s tag instance).</p> <p>## Root Cause The fix `3af0c251` added `unsafe_git_tag_options = [&#34;--file&#34;,&#34;-F&#34;]` and a guard call, but the guard is `Git.check_unsafe_options(options=Git._option_candidates([], kwargs), unsafe_options=...)` at `git/refs/tag.py:139` — it passes an EMPTY args list and inspects **kwargs only**. The dangerous values `path` and `reference` are POSITIONALS (`args = (path, reference)`, tag.py:156), placed before any `--`. A user-influenced `reference=&#34;--file=&lt;path&gt;&#34;` therefore reaches `git tag` as the exact `--file` option the fix intended to block, creating an annotated tag whose message is the file&#39;s contents.</p> <p>## Impact Arbitrary local file read at the privileges of the host process; contents returned in-band via `tagref.tag.message`. Requires the embedding application to forward a caller-influenced `reference` value into `TagReference.create()` (pure VALUE control — the CVE-2026-42215 threat model). Default `allow_unsafe_options=False`.</p> <p>## Proof of Concept ```python from git import TagReference t = TagReference.create(repo, &#34;vpwn&#34;, reference=&#34;--file=/home/app/.ssh/id_rsa&#34;) print(t.tag.message) # content…</p> <p><strong>Affected:</strong> PyPI: GitPython</p> <p>## Summary `TagReference.create()` forwards a caller-influenced positional `reference` value into `git tag` without it ever being inspected by the unsafe-option guard, allowing an arbitrary file read (the file&#39;s contents are returned in-band as the annotated tag message). This is an incomplete-fix bypass of commit `3af0c251` (the fix for GHSA-3f7w-8rr8-f37f&#39;s tag instance).</p> <p>## Root Cause The fix `3af0c251` added `unsafe_git_tag_options = [&#34;--file&#34;,&#34;-F&#34;]` and a guard call, but the guard is `Git.check_unsafe_options(options=Git._option_candidates([], kwargs), unsafe_options=...)` at `git/refs/tag.py:139` — it passes an EMPTY args list and inspects **kwargs only**. The dangerous values `path` and `reference` are POSITIONALS (`args = (path, reference)`, tag.py:156), placed before any `--`. A user-influenced `reference=&#34;--file=&lt;path&gt;&#34;` therefore reaches `git tag` as the exact `--file` option the fix intended to block, creating an annotated tag whose message is the file&#39;s contents.</p> <p>## Impact Arbitrary local file read at the privileges of the host process; contents returned in-band via `tagref.tag.message`. Requires the embedding application to forward a caller-influenced `reference` value into `TagReference.create()` (pure VALUE control — the CVE-2026-42215 threat model). Default `allow_unsafe_options=False`.</p> <p>## Proof of Concept ```python from git import TagReference t = TagReference.create(repo, &#34;vpwn&#34;, reference=&#34;--file=/home/app/.ssh/id_rsa&#34;) print(t.tag.message) # content…</p> https://cve.radiocsirt.org/vuln/ghsa-3wxw-xv34-2frg