Title: guard unsafe git command options by Byron · Pull Request #2163 · gitpython-developers/GitPython · GitHub
Open Graph Title: guard unsafe git command options by Byron · Pull Request #2163 · gitpython-developers/GitPython
X Title: guard unsafe git command options by Byron · Pull Request #2163 · gitpython-developers/GitPython
Description: Tasks basic review of the Codex 5.5 based rework of the previous PR. Didn't even look at the copilot comments and their auto-resolution. @EliahKagan 's in-depth review and validation of the advisory Advisory summary Advisory: GHSA-956x-8gvw-wg5v GHSA: GHSA-956x-8gvw-wg5v Severity: high Affected package: GitPython (pip) Vulnerable range: <= 3.1.50 Patched versions: not specified in advisory CVE: not listed Issue pattern: command execution / argument injection via unguarded command options Validation: Added regression tests for archive, iter_commits, blame, and git ls-remote unsafe option handling. Focused validation not runnable here due missing pytest module in environment. Created by Codex on behalf of Byron. Byron will review before this is ready to merge.
Open Graph Description: Tasks basic review of the Codex 5.5 based rework of the previous PR. Didn't even look at the copilot comments and their auto-resolution. @EliahKagan 's in-depth review and validation of ...
X Description: Tasks basic review of the Codex 5.5 based rework of the previous PR. Didn't even look at the copilot comments and their auto-resolution. @EliahKagan 's in-depth review and valida...
Opengraph URL: https://github.com/gitpython-developers/GitPython/pull/2163
X: @github
Domain: github.com
| route-pattern | /:user_id/:repository/pull/:id/files(.:format) |
| route-controller | pull_requests |
| route-action | files |
| fetch-nonce | v2:98140d6c-9045-7aec-a6d0-edb2138ab5ba |
| current-catalog-service-hash | ae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b |
| request-id | A4CA:388D53:2AD4CB0:3DE2687:6A567456 |
| html-safe-nonce | 24c68ec00a1e95e9fd6341a5301f322fc088687cd3d7cf5b91b2d4eee3ec59a6 |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJBNENBOjM4OEQ1MzoyQUQ0Q0IwOjNERTI2ODc6NkE1Njc0NTYiLCJ2aXNpdG9yX2lkIjoiNjIzMTIzNDM3NTU0MTIyNDUzNCIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9 |
| visitor-hmac | e852f3d196d7e062c8a84b32bf48a1bdd88d7c6caacface1765f3989fd1a264f |
| hovercard-subject-tag | pull_request:3880688019 |
| github-keyboard-shortcuts | repository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | / |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/gitpython-developers/GitPython/pull/2163/files |
| twitter:image | https://avatars.githubusercontent.com/u/63622?s=400&v=4 |
| twitter:card | summary_large_image |
| og:image | https://avatars.githubusercontent.com/u/63622?s=400&v=4 |
| og:image:alt | Tasks basic review of the Codex 5.5 based rework of the previous PR. Didn't even look at the copilot comments and their auto-resolution. @EliahKagan 's in-depth review and validation of ... |
| og:site_name | GitHub |
| og:type | object |
| hostname | github.com |
| expected-hostname | github.com |
| None | 19b5ee9431dcfce15ab4b001d626e4e3a6ba1acb7be814813a52bbebd9a86ef5 |
| turbo-cache-control | no-preview |
| diff-view | unified |
| go-import | github.com/gitpython-developers/GitPython git https://github.com/gitpython-developers/GitPython.git |
| octolytics-dimension-user_id | 503709 |
| octolytics-dimension-user_login | gitpython-developers |
| octolytics-dimension-repository_id | 1126087 |
| octolytics-dimension-repository_nwo | gitpython-developers/GitPython |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 1126087 |
| octolytics-dimension-repository_network_root_nwo | gitpython-developers/GitPython |
| turbo-body-classes | logged-out env-production page-responsive full-width |
| disable-turbo | true |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | afc01ffdb045f4ff81c6122091366ade7b6166b7 |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
Links:
Viewport: width=device-width