CVE-2026-73624

Name of the Vulnerable Software and Affected Versions GitPython versions prior to 3.1.54

Description An arbitrary file overwrite issue exists in the Diffable.diff() method due to insufficient validation of git options passed through kwargs. An attacker can use the --output argument via the other parameter or output kwarg to write patch content to files at paths of their choosing, operating at the privilege level of the process.

Recommendations Update GitPython to version 3.1.54 or later.