Anir0Y

**Name of the Vulnerable Software and Affected Versions** GitPython versions prior to 3.1.57 **Description** An incomplete denylist in the `unsafe git archive options` guard allows attackers to provide the `--add-file` and `--add-virtual-file` options to the `Repo.archive()` function. This can be exploited to read arbitrary files from the filesystem and include them in the generated archive. **Recommendations** Update GitPython to version 3.1.57 or later.