THREATOPS

THREAT OPS › Threat News › [GHSA] GHSA-3f7w-8rr8-f37f (high) — GitPython: Unguarded git option forwarding in IndexFile.checkout() and TagReference.create() enables arbitrary file overwrite and arbitrary file read

[GHSA] GHSA-3f7w-8rr8-f37f (high) — GitPython: Unguarded git option forwarding in IndexFile.checkout() and TagReference.create() enables arbitrary file overwrite and arbitrary file read

medgithub_advisoriesPublished 2026-08-03

GHSA-3f7w-8rr8-f37f Severity: high CVE: None

GitPython: Unguarded git option forwarding in IndexFile.checkout() and TagReference.create() enables arbitrary file overwrite and arbitrary file read

**Target:** gitpython-developers/GitPython **Tested:** HEAD `07e80555` (2026-07-25), latest release 3.1.55, `git version 2.50.1` **Reported instances:** 2 exploitable, from a sweep of 14 unguarded call s

Original source: https://github.com/advisories/GHSA-3f7w-8rr8-f37f