Cpe:2.3:a:gitpython:gitpython:*:*:*:*:*:*:*:*

GitPython versions prior to 3.2.1 are vulnerable to a path traversal flaw in the create_submodule() function, which allows an attacker-influenced submodule path to lead to the execution of a planted post-checkout hook.