| route-pattern | /_view_fragments/voltron/pull_requests/show/:user_id/:repository/:id/pull_request_layout(.:format) |
| route-controller | voltron_pull_requests_fragments |
| route-action | pull_request_layout |
| fetch-nonce | v2:8091e789-f9cc-e39d-86ad-18e2d73d9cb4 |
| current-catalog-service-hash | ae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b |
| request-id | 9CBA:34CBA6:4ADB9A:658F9A:6A5693F8 |
| html-safe-nonce | f0e96145d6ee52f43c3609cd12b2007790abe942dc4021a1ab4fff2e4cfa2bd7 |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiI5Q0JBOjM0Q0JBNjo0QURCOUE6NjU4RjlBOjZBNTY5M0Y4IiwidmlzaXRvcl9pZCI6IjUzODUyMjU5MDM4NTIxMzEzMjAiLCJyZWdpb25fZWRnZSI6ImlhZCIsInJlZ2lvbl9yZW5kZXIiOiJpYWQifQ== |
| visitor-hmac | 1ef8029e720f974509a58dfb6a8586547017ed4068e3313ab9b44972a5229a58 |
| hovercard-subject-tag | pull_request:3880673141 |
| github-keyboard-shortcuts | repository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | ///voltron/pull_requests_fragments/pull_request_layout |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/_view_fragments/voltron/pull_requests/show/gitpython-developers/GitPython/2161/pull_request_layout |
| twitter:image | https://opengraph.githubassets.com/0fa98d40de4c3a0cb624e6709c2301701243c4f19d026f2f0016fee06d91576a/gitpython-developers/GitPython/pull/2161 |
| twitter:card | summary_large_image |
| og:image | https://opengraph.githubassets.com/0fa98d40de4c3a0cb624e6709c2301701243c4f19d026f2f0016fee06d91576a/gitpython-developers/GitPython/pull/2161 |
| og:image:alt | Tasks
basic review
Advisory
Advisory URL: GHSA-2f96-g7mh-g2hx
GHSA: GHSA-2f96-g7mh-g2hx
Severity: high (estimated CVSS 8.8, CVE-2026-42215 class)
Affected package/version range: PyPI: GitPytho... |
| og:image:width | 1200 |
| og:image:height | 600 |
| og:site_name | GitHub |
| og:type | object |
| og:author:username | Byron |
| hostname | github.com |
| expected-hostname | github.com |
| None | 647a25f437e2f54eccdd162bd007c8ae70f4235c4125dba0f4518747cc8b9615 |
| turbo-cache-control | no-cache |
| go-import | github.com/gitpython-developers/GitPython git https://github.com/gitpython-developers/GitPython.git |
| octolytics-dimension-user_id | 503709 |
| octolytics-dimension-user_login | gitpython-developers |
| octolytics-dimension-repository_id | 1126087 |
| octolytics-dimension-repository_nwo | gitpython-developers/GitPython |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 1126087 |
| octolytics-dimension-repository_network_root_nwo | gitpython-developers/GitPython |
| turbo-body-classes | logged-out env-production page-responsive |
| disable-turbo | false |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | 05adb86a60ce3d701e556eded3ab26300ec6bcc4 |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
| Skip to content | https://github.com/gitpython-developers/GitPython/pull/2161/{{ revealButtonHref }}#start-of-content |
|
| https://github.com/ |
|
Sign in
| https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgitpython-developers%2FGitPython%2Fpull%2F2161 |
| GitHub CopilotWrite better code with AI | https://github.com/features/copilot |
| GitHub Copilot appDirect agents from issue to merge | https://github.com/features/ai/github-app |
| MCP RegistryNewIntegrate external tools | https://github.com/mcp |
| ActionsAutomate any workflow | https://github.com/features/actions |
| CodespacesInstant dev environments | https://github.com/features/codespaces |
| IssuesPlan and track work | https://github.com/features/issues |
| Code ReviewManage code changes | https://github.com/features/code-review |
| GitHub Advanced SecurityFind and fix vulnerabilities | https://github.com/security/advanced-security |
| Code securitySecure your code as you build | https://github.com/security/advanced-security/code-security |
| Secret protectionStop leaks before they start | https://github.com/security/advanced-security/secret-protection |
| Why GitHub | https://github.com/why-github |
| Documentation | https://docs.github.com |
| Blog | https://github.blog |
| Changelog | https://github.blog/changelog |
| Marketplace | https://github.com/marketplace |
| View all features | https://github.com/features |
| Enterprises | https://github.com/enterprise |
| Small and medium teams | https://github.com/team |
| Startups | https://github.com/enterprise/startups |
| Nonprofits | https://github.com/solutions/industry/nonprofits |
| App Modernization | https://github.com/solutions/use-case/app-modernization |
| DevSecOps | https://github.com/solutions/use-case/devsecops |
| DevOps | https://github.com/solutions/use-case/devops |
| CI/CD | https://github.com/solutions/use-case/ci-cd |
| View all use cases | https://github.com/solutions/use-case |
| Healthcare | https://github.com/solutions/industry/healthcare |
| Financial services | https://github.com/solutions/industry/financial-services |
| Manufacturing | https://github.com/solutions/industry/manufacturing |
| Government | https://github.com/solutions/industry/government |
| View all industries | https://github.com/solutions/industry |
| View all solutions | https://github.com/solutions |
| AI | https://github.com/resources/articles?topic=ai |
| Software Development | https://github.com/resources/articles?topic=software-development |
| DevOps | https://github.com/resources/articles?topic=devops |
| Security | https://github.com/resources/articles?topic=security |
| View all topics | https://github.com/resources/articles |
| Customer stories | https://github.com/customer-stories |
| Events & webinars | https://github.com/resources/events |
| Ebooks & reports | https://github.com/resources/whitepapers |
| Business insights | https://github.com/solutions/executive-insights |
| GitHub Skills | https://skills.github.com |
| Documentation | https://docs.github.com |
| Customer support | https://support.github.com |
| Community forum | https://github.com/orgs/community/discussions |
| Trust center | https://github.com/trust-center |
| Partners | https://github.com/partners |
| View all resources | https://github.com/resources |
| GitHub SponsorsFund open source developers | https://github.com/open-source/sponsors |
| Security Lab | https://securitylab.github.com |
| Maintainer Community | https://maintainers.github.com |
| Accelerator | https://github.com/open-source/accelerator |
| GitHub Stars | https://stars.github.com |
| Archive Program | https://archiveprogram.github.com |
| Topics | https://github.com/topics |
| Trending | https://github.com/trending |
| Collections | https://github.com/collections |
| Enterprise platformAI-powered developer platform | https://github.com/enterprise |
| GitHub Advanced SecurityEnterprise-grade security features | https://github.com/security/advanced-security |
| Copilot for BusinessEnterprise-grade AI features | https://github.com/features/copilot/copilot-business |
| Premium SupportEnterprise-grade 24/7 support | https://github.com/enterprise/premium-support |
| Pricing | https://github.com/pricing |
| Search syntax tips | https://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax |
| documentation | https://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax |
|
Sign in
| https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgitpython-developers%2FGitPython%2Fpull%2F2161 |
|
Sign up
| https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fvoltron%2Fpull_requests_fragments%2Fpull_request_layout&source=header-repo&source_repo=gitpython-developers%2FGitPython |
| Reload | https://github.com/gitpython-developers/GitPython/pull/2161/{{ revealButtonHref }} |
| Reload | https://github.com/gitpython-developers/GitPython/pull/2161/{{ revealButtonHref }} |
| Reload | https://github.com/gitpython-developers/GitPython/pull/2161/{{ revealButtonHref }} |
| Please reload this page | https://github.com/gitpython-developers/GitPython/pull/2161/{{ revealButtonHref }} |
|
gitpython-developers
| https://github.com/gitpython-developers |
| GitPython | https://github.com/gitpython-developers/GitPython |
| Please reload this page | https://github.com/gitpython-developers/GitPython/pull/2161/{{ revealButtonHref }} |
|
Notifications
| https://github.com/login?return_to=%2Fgitpython-developers%2FGitPython |
|
Fork
980
| https://github.com/login?return_to=%2Fgitpython-developers%2FGitPython |
|
Star
5.1k
| https://github.com/login?return_to=%2Fgitpython-developers%2FGitPython |
|
Code
| https://github.com/gitpython-developers/GitPython |
|
Issues
165
| https://github.com/gitpython-developers/GitPython/issues |
|
Pull requests
9
| https://github.com/gitpython-developers/GitPython/pulls |
|
Discussions
| https://github.com/gitpython-developers/GitPython/discussions |
|
Actions
| https://github.com/gitpython-developers/GitPython/actions |
|
Security and quality
11
| https://github.com/gitpython-developers/GitPython/security |
|
Insights
| https://github.com/gitpython-developers/GitPython/pulse |
|
Code
| https://github.com/gitpython-developers/GitPython |
|
Issues
| https://github.com/gitpython-developers/GitPython/issues |
|
Pull requests
| https://github.com/gitpython-developers/GitPython/pulls |
|
Discussions
| https://github.com/gitpython-developers/GitPython/discussions |
|
Actions
| https://github.com/gitpython-developers/GitPython/actions |
|
Security and quality
| https://github.com/gitpython-developers/GitPython/security |
|
Insights
| https://github.com/gitpython-developers/GitPython/pulse |
| Byron | https://github.com/Byron |
| main | https://github.com/gitpython-developers/GitPython/tree/main |
| fix-aut-joined-short-bypass-2 | https://github.com/gitpython-developers/GitPython/tree/fix-aut-joined-short-bypass-2 |
| Conversation | https://github.com/gitpython-developers/GitPython/pull/2161 |
| Commits1 (1) | https://github.com/gitpython-developers/GitPython/pull/2161/commits |
| Checks | https://github.com/gitpython-developers/GitPython/pull/2161/checks |
| Files changed | https://github.com/gitpython-developers/GitPython/pull/2161/files |
| fix: block unsafe long-option prefixes (GHSA-2f96-g7mh-g2hx) | https://github.com/gitpython-developers/GitPython/pull/2161/{{ revealButtonHref }}#top |
| Byron | https://github.com/Byron |
| main | https://github.com/gitpython-developers/GitPython/tree/main |
| fix-aut-joined-short-bypass-2 | https://github.com/gitpython-developers/GitPython/tree/fix-aut-joined-short-bypass-2 |
|
| https://github.com/Byron |
| Byron | https://github.com/Byron |
| Jun 17, 2026 | https://github.com/gitpython-developers/GitPython/pull/2161/{{ revealButtonHref }}#issue-4680058303 |
| Please reload this page | https://github.com/gitpython-developers/GitPython/pull/2161/{{ revealButtonHref }} |
| GHSA-2f96-g7mh-g2hx | https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-2f96-g7mh-g2hx |
| GHSA-2f96-g7mh-g2hx | https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-2f96-g7mh-g2hx |
| CVE-2026-42215 | https://github.com/advisories/GHSA-rpm5-65cw-6hj4 |
| Please reload this page | https://github.com/gitpython-developers/GitPython/pull/2161/{{ revealButtonHref }} |
|
| https://github.com/apps/copilot-pull-request-reviewer |
| Copilot | https://github.com/apps/copilot-pull-request-reviewer |
| June 17, 2026 04:28 | https://github.com/gitpython-developers/GitPython/pull/2161/{{ revealButtonHref }}#event-26841759718 |
| started reviewing | https://github.com/gitpython-developers/GitPython/sessions/d28a184a-61a9-4df8-a340-3c022cffc418 |
| Byron | https://github.com/Byron |
| June 17, 2026 04:33 | https://github.com/gitpython-developers/GitPython/pull/2161/{{ revealButtonHref }}#event-26841894227 |
|
View session
| https://github.com/gitpython-developers/GitPython/sessions/d28a184a-61a9-4df8-a340-3c022cffc418 |
|
| https://github.com/apps/copilot-pull-request-reviewer |
| Copilot | https://github.com/apps/copilot-pull-request-reviewer |
|
Jun 17, 2026
| https://github.com/gitpython-developers/GitPython/pull/2161/{{ revealButtonHref }}#pullrequestreview-4512359665 |
|
View reviewed changes
| https://github.com/gitpython-developers/GitPython/pull/2161/files |
| Copilot | https://github.com/apps/copilot-pull-request-reviewer |
| https://github.com/gitpython-developers/GitPython/pull/2161/{{ revealButtonHref }}#pullrequestreview-4512359665 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| GHSA-2f96-g7mh-g2hx | https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-2f96-g7mh-g2hx |
| Add Copilot custom instructions | https://github.com/gitpython-developers/GitPython/new/main?filename=.github/instructions/*.instructions.md |
| Learn how to get started | https://docs.github.com/en/copilot/customizing-copilot/adding-repository-custom-instructions-for-github-copilot |
| Please reload this page | https://github.com/gitpython-developers/GitPython/pull/2161/{{ revealButtonHref }} |
| git/cmd.py | https://github.com/gitpython-developers/GitPython/pull/2161/files#diff-35a18a749eb4d6efad45e56e78a9554926be5526e2ba2159b44311e718450e88 |
| Please reload this page | https://github.com/gitpython-developers/GitPython/pull/2161/{{ revealButtonHref }} |
| https://github.com/Byron |
| Byron | https://github.com/Byron |
| force-pushed | https://github.com/gitpython-developers/GitPython/compare/c705fe7e108cac62bd4fe34db3ec9f058a1b648d..ae091b7d017b9dd315f8bdbf248ccb542b72754d |
| c705fe7 | https://github.com/gitpython-developers/GitPython/commit/c705fe7e108cac62bd4fe34db3ec9f058a1b648d |
| ae091b7 | https://github.com/gitpython-developers/GitPython/commit/ae091b7d017b9dd315f8bdbf248ccb542b72754d |
|
Compare
| https://github.com/gitpython-developers/GitPython/compare/c705fe7e108cac62bd4fe34db3ec9f058a1b648d..ae091b7d017b9dd315f8bdbf248ccb542b72754d |
| June 17, 2026 05:45 | https://github.com/gitpython-developers/GitPython/pull/2161/{{ revealButtonHref }}#event-26843928762 |
|
| https://github.com/apps/copilot-pull-request-reviewer |
| Copilot | https://github.com/apps/copilot-pull-request-reviewer |
| June 17, 2026 08:00 | https://github.com/gitpython-developers/GitPython/pull/2161/{{ revealButtonHref }}#event-26848826166 |
| https://github.com/Byron |
| Byron | https://github.com/Byron |
| force-pushed | https://github.com/gitpython-developers/GitPython/compare/ae091b7d017b9dd315f8bdbf248ccb542b72754d..6762a2c5c1cfb4659be110c4f1e182493add7741 |
| ae091b7 | https://github.com/gitpython-developers/GitPython/commit/ae091b7d017b9dd315f8bdbf248ccb542b72754d |
| 6762a2c | https://github.com/gitpython-developers/GitPython/commit/6762a2c5c1cfb4659be110c4f1e182493add7741 |
|
Compare
| https://github.com/gitpython-developers/GitPython/compare/ae091b7d017b9dd315f8bdbf248ccb542b72754d..6762a2c5c1cfb4659be110c4f1e182493add7741 |
| June 17, 2026 08:00 | https://github.com/gitpython-developers/GitPython/pull/2161/{{ revealButtonHref }}#event-26848826175 |
| started reviewing | https://github.com/gitpython-developers/GitPython/sessions/91ed0dd3-1d1d-49bd-b295-3698b2ed4cb8 |
| Byron | https://github.com/Byron |
| June 17, 2026 08:03 | https://github.com/gitpython-developers/GitPython/pull/2161/{{ revealButtonHref }}#event-26848917762 |
|
View session
| https://github.com/gitpython-developers/GitPython/sessions/91ed0dd3-1d1d-49bd-b295-3698b2ed4cb8 |
|
| https://github.com/apps/copilot-pull-request-reviewer |
| Copilot | https://github.com/apps/copilot-pull-request-reviewer |
|
Jun 17, 2026
| https://github.com/gitpython-developers/GitPython/pull/2161/{{ revealButtonHref }}#pullrequestreview-4513622271 |
|
View reviewed changes
| https://github.com/gitpython-developers/GitPython/pull/2161/files |
| Copilot | https://github.com/apps/copilot-pull-request-reviewer |
| https://github.com/gitpython-developers/GitPython/pull/2161/{{ revealButtonHref }}#pullrequestreview-4513622271 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| Please reload this page | https://github.com/gitpython-developers/GitPython/pull/2161/{{ revealButtonHref }} |
| git/cmd.py | https://github.com/gitpython-developers/GitPython/pull/2161/files#diff-35a18a749eb4d6efad45e56e78a9554926be5526e2ba2159b44311e718450e88 |
| Please reload this page | https://github.com/gitpython-developers/GitPython/pull/2161/{{ revealButtonHref }} |
| test/test_git.py | https://github.com/gitpython-developers/GitPython/pull/2161/files#diff-84c4b72d5c62026240fad69041a453efc37f7336a89035b69672cce0e8beaca1 |
| Please reload this page | https://github.com/gitpython-developers/GitPython/pull/2161/{{ revealButtonHref }} |
| test/test_clone.py | https://github.com/gitpython-developers/GitPython/pull/2161/files#diff-55c336bc9212ba346c26cda95a6fb0702302ec3969e205ba85ac76db08447194 |
| Please reload this page | https://github.com/gitpython-developers/GitPython/pull/2161/{{ revealButtonHref }} |
| test/test_clone.py | https://github.com/gitpython-developers/GitPython/pull/2161/files#diff-55c336bc9212ba346c26cda95a6fb0702302ec3969e205ba85ac76db08447194 |
| Please reload this page | https://github.com/gitpython-developers/GitPython/pull/2161/{{ revealButtonHref }} |
| https://github.com/Byron |
| Byron | https://github.com/Byron |
|
Jun 17, 2026
| https://github.com/gitpython-developers/GitPython/pull/2161/{{ revealButtonHref }}#ref-pullrequest-4680068070 |
|
fix: block joined short unsafe clone options
#2162
| https://github.com/gitpython-developers/GitPython/pull/2162 |
|
| https://github.com/codex |
|
| https://github.com/Byron |
| fix: block unsafe long-option prefixes (GHSA-2f96-g7mh-g2hx) [ruff-fo… | https://github.com/gitpython-developers/GitPython/pull/2161/commits/0d88094a72204a00802015e5611dc261aaf638ed |
| 0d88094 | https://github.com/gitpython-developers/GitPython/pull/2161/commits/0d88094a72204a00802015e5611dc261aaf638ed |
| https://github.com/Byron |
| Byron | https://github.com/Byron |
| force-pushed | https://github.com/gitpython-developers/GitPython/compare/6762a2c5c1cfb4659be110c4f1e182493add7741..0d88094a72204a00802015e5611dc261aaf638ed |
| 6762a2c | https://github.com/gitpython-developers/GitPython/commit/6762a2c5c1cfb4659be110c4f1e182493add7741 |
| 0d88094 | https://github.com/gitpython-developers/GitPython/commit/0d88094a72204a00802015e5611dc261aaf638ed |
|
Compare
| https://github.com/gitpython-developers/GitPython/compare/6762a2c5c1cfb4659be110c4f1e182493add7741..0d88094a72204a00802015e5611dc261aaf638ed |
| June 17, 2026 09:17 | https://github.com/gitpython-developers/GitPython/pull/2161/{{ revealButtonHref }}#event-26851810076 |
| https://github.com/Byron |
| Byron | https://github.com/Byron |
| Jul 12, 2026 | https://github.com/gitpython-developers/GitPython/pull/2161/{{ revealButtonHref }}#issuecomment-4951168583 |
| #2168 | https://github.com/gitpython-developers/GitPython/pull/2168 |
| Please reload this page | https://github.com/gitpython-developers/GitPython/pull/2161/{{ revealButtonHref }} |
| https://github.com/Byron |
| Byron | https://github.com/Byron |
| Jul 12, 2026 | https://github.com/gitpython-developers/GitPython/pull/2161/{{ revealButtonHref }}#event-27873187033 |
| https://github.co/hiddenchars |
| https://github.com/gitpython-developers/GitPython/pull/2161/{{ revealButtonHref }} |
| Sign up for free | https://github.com/join?source=comment-repo |
| Sign in to comment | https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgitpython-developers%2FGitPython%2Fpull%2F2161 |
|
Copilot code review
| https://github.com/apps/copilot-pull-request-reviewer |
|
Copilot
| https://github.com/apps/copilot-pull-request-reviewer |
|
| https://github.com/gitpython-developers/GitPython/pull/2161/files/6762a2c5c1cfb4659be110c4f1e182493add7741 |
| Please reload this page | https://github.com/gitpython-developers/GitPython/pull/2161/{{ revealButtonHref }} |
|
| https://github.com/Byron |
|
| https://github.com/apps/copilot-pull-request-reviewer |
|
| https://github.com/codex |
|
| https://github.com |
| Terms | https://docs.github.com/site-policy/github-terms/github-terms-of-service |
| Privacy | https://docs.github.com/site-policy/privacy-policies/github-privacy-statement |
| Security | https://github.com/security |
| Status | https://www.githubstatus.com/ |
| Community | https://github.community/ |
| Docs | https://docs.github.com/ |
| Contact | https://support.github.com?tags=dotcom-footer |