GitPython: separate_git_dir leaks env vars via crafted .gitmodules submodule name

影響: pip:GitPython <= 3.1.62 → 3.2.0

Repo._clone()'s handling of separate_git_dir never disables Git.polish_url()'s environment-variable expansion, unlike every other caller of that helper that handles attacker-influenced data. Since separate_git_dir can be derived from an attacker-controlled .gitmodules submodule name, a completely ordinary clone + submodule_update(init=True, recursive=True) on a malicious repository expands an environment variable of the attacker's choosing and exposes its value both as a persistent on-disk dire…

Read on GitHub Advisory Database

On 10/28/2026, 12:26 AM, GitHub Advisory Database published "GitPython: separate_git_dir leaks env vars via crafted .gitmodules submodule name" (type: Advisory). Severity is "Medium" (medium). Related technologies: Python.