https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-30T23:37:23.077319+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-73624 CVE-2026-73624 — GitPython before 3.1.54 Arbitrary File Overwrite via diff 2026-09-30T23:37:23.102958+00:00

Affected: gitpython-developers GitPython

GitPython versions before 3.1.54 contain an arbitrary file overwrite vulnerability in the Diffable.diff method that fails to validate git options passed through kwargs. Attackers can supply the --output argument via the other parameter or output kwarg to write patch content to attacker-chosen file paths at process privilege level.