TI-2026-54689 CVE-2026-78677 · GHSA-8mcc-hrx5-hvxc
GitPython before 3.1.59 Path Traversal via separate-git-dir
Priority HIGH 77
GitPython before 3.1.59 omits --separate-git-dir from unsafe_git_clone_options, allowing attackers to create arbitrary git directories outside the intended clone destination.