Security Advisory
CVE-2026-73620
8.1
HIGH
Vulnerability Description
GitPython before 3.1.57 fails to guard git option forwarding in IndexFile.checkout() and TagReference.create(), allowing attackers to pass unsafe options via kwargs. Attackers can use --prefix to overwrite arbitrary files with repository content or -F to read arbitrary files returned in-band.
Published Date
August 13, 2026
Official Source
NIST NVD Advisory