{"id":"ghsa-ghsa-gq48-pqfc-9p58","seq":1708806,"kind":"advisory","title":"GitPython: Submodule.move() follows an attacker-committed intermediate symlink outside the worktree","url":"https://github.com/advisories/GHSA-gq48-pqfc-9p58","permalink":"https://vulnpulse.app/items/ghsa-ghsa-gq48-pqfc-9p58","summary":"影響: pip:GitPython < 3.2.0 → 3.2.0\nGitPython's public Submodule.move() API verifies that its destination is lexically inside the parent repository, but it does not reject symbolic links in the destination's intermediate components before filesystem operations. On systems that check out Git symlinks, an untrusted repository can therefore redirect a fixed, application-selected move destination outside the parent worktree. The reporter reproduced this on the latest release, GitPython 3.1.62, and current main. In the strict scenario…","severity":"medium","techs":["python"],"cves":[],"tags":["GHSA-gq48-pqfc-9p58","GitPython"],"source":{"id":"ghsa","name":"GitHub Advisory Database"},"published_at":"2026-10-27T15:26:57.000Z","fetched_at":"2026-10-27T21:03:52.214Z"}