{"uuid": "b4844971-3bc2-4f37-b82e-b64efc1c5b35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78676", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117153911650352822", "content": "CVE-2026-78676 | GitPython &lt;3.1.59 has a CRITICAL argument injection flaw: multi-line git-config values can become active directives, enabling arbitrary code execution via git hooks. Patch status unknown \u2014 avoid untrusted configs. https://radar.offseq.com/threat/cve-2026-78676-improper-neutralization-of-argument-delimiters-in-a-command-argument-injection-in-98aef85f24190fbe #OffSeq #CVE202678676 #git #infosec", "creation_timestamp": "2026-08-25T03:00:26.436451Z"}