Skip to content
Threat Feed
Subscribe

Product

Dulwich (>= 0.23.1, <= 1.2.7)

1 brief RSS
high advisory

Arbitrary File Write in Dulwich via Malicious Git Tree Paths

The Dulwich Git library for Python fails to validate DOS drive letter prefixes on Windows, allowing a malicious Git repository to write files to arbitrary locations outside the designated worktree.

dulwich +2 path-traversal git remote-code-execution python
4t