Bhaswanthc

**Name of the Vulnerable Software and Affected Versions** GitPython versions prior to 3.1.58 **Description** An arbitrary file overwrite issue exists in the `IndexFile.from tree()`, `IndexFile.reset()`, and `IndexFile.merge tree()` methods. These methods append caller-influenced treeish strings to the git read-tree command without proper option validation or argument separation. This allows attackers to inject the `--index-output` option to overwrite arbitrary files with a valid git-index blob, resulting in the destruction of existing file content at writable paths controlled by the attacker. **Recommendations** Update GitPython to version 3.1.58 or later.

**Name of the Vulnerable Software and Affected Versions** multer versions 2.0.0-alpha.1 through 2.1.1 multer version 3.0.0-alpha.1 **Description** A Denial of Service issue exists when using diskStorage. Aborted or malformed multipart uploads leave orphaned partial files on disk because the `Readable.pipe()` call does not propagate the stream destroy signal to the underlying `fs.WriteStream`. This allows an attacker to exhaust disk space by triggering numerous aborted uploads. **Recommendations** Upgrade to version 2.2.0 for versions 2.0.0-alpha.1 through 2.1.1. Upgrade to version 3.0.0-alpha.2 for version 3.0.0-alpha.1.