GitPython: separate_git_dir leaks env vars via crafted .gitmodules submodule name

影響: pip:GitPython <= 3.1.62 → 3.2.0

Repo._clone()'s handling of separate_git_dir never disables Git.polish_url()'s environment-variable expansion, unlike every other caller of that helper that handles attacker-influenced data. Since separate_git_dir can be derived from an attacker-controlled .gitmodules submodule name, a completely ordinary clone + submodule_update(init=True, recursive=True) on a malicious repository expands an environment variable of the attacker's choosing and exposes its value both as a persistent on-disk dire…

在 GitHub Advisory Database 阅读

2026/10/28 00:26，GitHub Advisory Database 发布了“GitPython: separate_git_dir leaks env vars via crafted .gitmodules submodule name”（类型：漏洞公告）。严重程度为“中危”（medium）。相关技术：Python。