Security Advisory

CVE-2026-76217

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-19 14:02:02

Last updated 2026-08-19 14:02:02

Assigner VulnCheck

CVSS score 7.1

State PUBLISHED

Description

GitPython versions before 3.1.58 fail to validate options passed to git rm and git checkout commands in IndexFile.remove() and Head.checkout(). Attackers can supply --pathspec-from-file and --pathspec-file-nul parameters to read arbitrary files accessible to the process, with full file contents returned in GitCommandError.stderr.

← Browse all CVEs View on cve.org ↗