← Database

CVE-2026-73620

HIGH CVSS: 8.1 Published: 2026-08-13 Modified: 2026-08-13

Description

GitPython before 3.1.57 fails to guard git option forwarding in IndexFile.checkout() and TagReference.create(), allowing attackers to pass unsafe options via kwargs. Attackers can use --prefix to overwrite arbitrary files with repository content or -F to read arbitrary files returned in-band.

Affected Platforms

Unknown

Weakness Type

CWE-22

References