Arbitrary Code Injection Affecting gitpython package, versions [,3.1.60)

GitPython is a python library used to interact with Git repositories

Affected versions of this package are vulnerable to Arbitrary Code Injection through Repo.__init__ and is_git_dir in git/repo/base.py and git/repo/fun.py. An attacker can execute arbitrary commands by supplying a repository whose tracked root files make GitPython treat the working-tree root as the git directory and then placing a malicious hooks/pre-commit there. When a victim opens or clones that repository and later calls repo.index.commit(), GitPython resolves the hook path inside attacker-controlled content instead of the real .git directory. That causes the pre-commit hook to run in the victim’s process, breaking the integrity of local repository operations.

Workarounds

• Do not open or clone untrusted repositories with GitPython unless you trust their tracked root files; attacker-controlled HEAD, gitdir, commondir, and hooks/ content can be treated as repository metadata and lead to hook execution.
• Avoid calling repo.index.commit() on repositories sourced from untrusted content; this is the operation that can execute a malicious tracked hooks/pre-commit in the victim process.

• GitHub Commit 3.1.60
• Maintainer's Advisory