PatchFirst · Vulnerabilidades recientes
La comparación de gitpython 3.1.53 está incompleta. Revisa las coincidencias confirmadas a continuación.
No se pudieron comparar 2 registros. Los resultados están incompletos.
Vulnerabilidades: 22
GitPython before 3.1.57 fails to guard git option forwarding in IndexFile.checkout() and TagReference.create(), allowing attackers to pass unsafe options via kwargs. Attackers can use --prefix to overwrite arbitrary files with repository content or -F to read arbitrary files returned in-band.
GitPython before 3.1.57 contains an incomplete denylist in the unsafe_git_archive_options guard that omits --add-file and --add-virtual-file options. Attackers can supply these options to Repo.archive() to read arbitrary files from the filesystem and include them in the returned archive.
Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.