Wirsbf

**Name of the Vulnerable Software and Affected Versions** GitPython versions prior to 3.2.0 **Description** Remote code execution is possible because `Git.ls remote` forwards URLs without performing `check unsafe protocols` validation. This allows attackers to execute commands by supplying `ext::` remote-helper URLs when git permits the `ext` transport. Additionally, `merge base` and `IndexFile.move` are susceptible to unguarded option injection. **Recommendations** Update GitPython to version 3.2.0 or later.