GitPython <= 3.1.58 Arbitrary File Read via Incomplete unsafe_git_revision_options Denylist in Repo.blame()

Vulnerability Overview Title: Incomplete unsafe_git_revision_options denylist omits --contents/-S, enabling arbitrary file read via Repo.blame() Description: Vulnerability Name: The denylist for is incomplete, missing the option, which allows arbitrary file read via . Vulnerability Type: Arbitrary File Read (READ) Vulnerability Source: GitHub Advisory GHSA-5xxx-ghh7-8287 Impact Scope Affected Versions: GitPython = 3.1.59 Severity: 6.5/10 (Medium) CVSS v3 Base Metrics: - Attack Vector: Network - Attack Complexity: Low - Privileges Required: Low - User Interaction: None - Scope: Unchanged - Confidentiality: High - Integrity: None - Availability: None Remediation Recommended Fix: Add the option to and modify the rule so that the option accepts a "filesystem path" rather than "output written by the option." Proof of Concept (POC) Code Attack Chain 1. Entry: The application calls , with the attacker passing (or kwarg or ). 2. Check: only bypasses the protection: canonical name contents @ denylist → no error. 3. Sink: . Argument (observed): . 4. Impact: Blame result rows contain the line text of the victim file. Bypass Evidence Independent Reproduction (independent test suite, default ): → guard PASSED, result rows = . Control: is still blocked (guard activates on this path). The kwarg also reaches an unguarded path. Affected Versions GitPython <= 3.1.58 (denylist present on the latest release tag) Recommended Fix Add (and any other blame options that take paths) to , and modify the rule so that the option accepts a "filesystem path" rather than "output written by the option." Reporter Reporter: zx (Jake) @ GitHub: @manus-use

Goal Reached Thanks to every supporter — we hit 100%!

GitPython <= 3.1.58 Arbitrary File Read via Incomplete unsafe_git_revision_options Denylist in Repo.blame()

More from this source