Matched advisory candidates (shard 2b)

advisories/BREW-aider-CVE-2026-37004.json

@@ -2,10 +2,11 @@
   "schema_version": "1.7.3",
   "id": "BREW-aider-CVE-2026-37004",
   "published": "2026-09-09T23:40:56Z",
-  "modified": "2026-09-09T23:40:56Z",
+  "modified": "2026-09-10T18:50:53Z",
   "upstream": [
     "GHSA-6wvf-77m9-58rm",
-    "CVE-2026-37004"
+    "CVE-2026-37004",
+    "PYSEC-2026-3861"
   ],
   "affected": [
     {

advisories/BREW-aider-CVE-2026-67322.json

@@ -2,10 +2,11 @@
   "schema_version": "1.7.3",
   "id": "BREW-aider-CVE-2026-67322",
   "published": "2026-08-13T16:35:12Z",
-  "modified": "2026-09-09T23:40:56Z",
+  "modified": "2026-09-10T18:50:25Z",
   "upstream": [
     "GHSA-rwj8-pgh3-r573",
-    "CVE-2026-67322"
+    "CVE-2026-67322",
+    "PYSEC-2026-3842"
   ],
   "affected": [
     {

advisories/BREW-aider-CVE-2026-67323.json

@@ -2,10 +2,11 @@
   "schema_version": "1.7.3",
   "id": "BREW-aider-CVE-2026-67323",
   "published": "2026-08-13T16:35:12Z",
-  "modified": "2026-09-09T23:40:56Z",
+  "modified": "2026-09-10T18:50:25Z",
   "upstream": [
     "GHSA-956x-8gvw-wg5v",
-    "CVE-2026-67323"
+    "CVE-2026-67323",
+    "PYSEC-2026-3839"
   ],
   "affected": [
     {

advisories/BREW-aider-CVE-2026-67324.json

@@ -0,0 +1,78 @@
+{
+  "schema_version": "1.7.3",
+  "id": "BREW-aider-CVE-2026-67324",
+  "published": "2026-09-10T18:50:53Z",
+  "modified": "2026-09-10T18:50:53Z",
+  "upstream": [
+    "GHSA-v396-v7q4-x2qj",
+    "CVE-2026-67324",
+    "PYSEC-2026-3947"
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "Homebrew",
+        "name": "aider",
+        "purl": "pkg:brew/aider"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0.47.1"
+            }
+          ]
+        }
+      ],
+      "ecosystem_specific": {
+        "fix": null,
+        "range_state": "affected",
+        "upstream_fixed_in": "3.1.50",
+        "resource": "gitpython",
+        "resource_purl": "pkg:pypi/gitpython@3.1.46"
+      }
+    }
+  ],
+  "database_specific": {
+    "source": "matched",
+    "strategy": "registry",
+    "confidence": "high",
+    "upstream_evidence": [
+      {
+        "strategy": "registry",
+        "ecosystem": "PyPI",
+        "name": "gitpython",
+        "subject_version": "3.1.46",
+        "key": "pkg:pypi/gitpython@3.1.46",
+        "resource": "gitpython"
+      }
+    ]
+  },
+  "summary": "GitPython unsafe clone option gate bypass through joined short options",
+  "details": "`GitPython` version `3.1.50` blocks unsafe `git clone` options such as `--upload-pack`, `-u`, `--config`, and `-c` unless callers explicitly pass `allow_unsafe_options=True`. However, the default unsafe-option gate does not recognize joined short-option forms such as `-u/path/to/helper`.\n\nGit itself accepts `-u<upload-pack>` as the short form of `--upload-pack=<upload-pack>`. As a result, `Repo.clone_from(..., multi_options=[\"-u<helper>\"], allow_unsafe_options=False)` can execute the helper command even though the equivalent long option is blocked.\n\nAffected package:\n\n- Ecosystem: PyPI\n- Package: `GitPython`\n- Confirmed affected version: `3.1.50`\n- Repository: `gitpython-developers/GitPython`\n- Current PyPI version during triage: `3.1.50`\n\nRelevant behavior:\n\n- `Repo.unsafe_git_clone_options` correctly lists `--upload-pack`, `-u`, `--config`, and `-c` as unsafe clone options.\n- `Repo._clone()` splits `multi_options` with `shlex.split(\" \".join(multi_options))` and then calls `Git.check_unsafe_options(...)`.\n- `_canonicalize_option_name(\"-u/path/to/helper\")` returns a string beginning with `u...`, not the canonical short option `u`, so it does not match the blocked `-u` entry.\n- Git accepts the same joined short option as `--upload-pack=<helper>` and executes the helper during clone.\n\nPreconditions:\n\nAn application must pass attacker-influenced clone options into `Repo.clone_from(..., multi_options=...)` while relying on GitPython's default unsafe-option gate to block command-executing options.\n\nThe local PoC uses only a local bare Git repository and a local helper script. It does not contact any third-party service.\n\nLocal reproduction:\n\nThe PoC creates a disposable bare Git repository, a helper script, and a sentinel file path. It first confirms that the long `--upload-pack=<helper>` form is blocked by GitPython. It then calls `Repo.clone_from(..., multi_options=[\"-u<helper>\"], allow_unsafe_options=False)`.\n\nObserved sanitized output:\n\n```text\ngitpython_version=3.1.50\ngit_version=git version 2.53.0.windows.1\ntmp_dir=<tmp>\nlong_upload_pack_gate=BLOCKED:UnsafeOptionError\njoined_short_upload_pack_gate=ALLOWED\nclone_result=EXPECTED_EXCEPTION:GitCommandError\nsentinel_exists=True\nsentinel_text=GITPYTHON_UNSAFE_OPTION_BYPASS\n```\n\nThe clone fails because the helper exits nonzero, but the sentinel file proves that Git executed the helper despite `allow_unsafe_options=False`.\n\nImpact:\n\nAn attacker who controls `multi_options` can bypass GitPython's default `allow_unsafe_options=False` protection and execute a local command via Git's `--upload-pack` / `-u` clone option. This is a residual bypass of an explicit GitPython security boundary, not merely a case where a caller opted into unsafe behavior.\n\nDuplicate / related advisory checks:\n\n- OSV query for `PyPI/GitPython` version `3.1.50` returned no vulnerabilities.\n- The repository's public advisories include related unsafe Git option issues, including `GHSA-x2qx-6953-8485` / `CVE-2026-42284` and `GHSA-rpm5-65cw-6hj4` / `CVE-2026-42215`. Their public affected ranges are marked as fixed before 3.1.50.\n- `GHSA-x2qx-6953-8485` describes validating `multi_options` before `shlex.split(...)`. GitPython 3.1.50 now validates after splitting, but the joined short option `-u<value>` still bypasses because the validator canonicalizes it to `u<value>` rather than `u`.\n- `GHSA-rpm5-65cw-6hj4` describes unsafe underscored kwargs such as `upload_pack=...`. The current PoC uses `multi_options=[\"-u<helper>\"]` against 3.1.50 and does not depend on underscored kwargs.\n- GitHub issue search for `upload-pack unsafe options` found historical related items, including CVE-2022-24439 and the earlier unsafe-options gate work, but no public issue describing this current joined-short-option residual bypass in 3.1.50.\n- GitHub issue search for `multi_options unsafe` found PR #2130, which fixed splitting of `multi_options` before checking. The current issue remains after that split because `-u<value>` is treated as option name `u<value>`, not blocked short option `u`.\n- GitHub issue searches for `u<upload-pack> unsafe` and `-cfoo` returned no results.\n\nSuggested remediation:\n\nWhen checking unsafe Git options, parse joined short options that take values. For clone, `-uVALUE` and `-cKEY=VALUE` should be canonicalized to `u` and `c` respectively before comparing against the unsafe option set.\n\nA safer approach is to maintain command-specific metadata for unsafe short options and recognize the bare option, split form, joined form, and long `--option=<value>` / `--option <value>` forms.",
+  "severity": [
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
+    }
+  ],
+  "references": [
+    {
+      "type": "WEB",
+      "url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-v396-v7q4-x2qj"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/gitpython-developers/GitPython/pull/2162"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/gitpython-developers/GitPython"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/gitpython-developers/GitPython/releases/tag/3.1.51"
+    }
+  ]
+}

advisories/BREW-aider-CVE-2026-67325.json

@@ -2,10 +2,11 @@
   "schema_version": "1.7.3",
   "id": "BREW-aider-CVE-2026-67325",
   "published": "2026-08-13T16:35:12Z",
-  "modified": "2026-09-09T23:40:56Z",
+  "modified": "2026-09-10T18:50:25Z",
   "upstream": [
     "GHSA-2f96-g7mh-g2hx",
-    "CVE-2026-67325"
+    "CVE-2026-67325",
+    "PYSEC-2026-3836"
   ],
   "affected": [
     {

advisories/BREW-aider-CVE-2026-73619.json

@@ -2,10 +2,11 @@
   "schema_version": "1.7.3",
   "id": "BREW-aider-CVE-2026-73619",
   "published": "2026-08-14T08:50:09Z",
-  "modified": "2026-08-14T08:50:09Z",
+  "modified": "2026-09-10T18:50:25Z",
   "upstream": [
     "GHSA-539m-9xh6-q6rr",
-    "CVE-2026-73619"
+    "CVE-2026-73619",
+    "PYSEC-2026-3948"
   ],
   "affected": [
     {

advisories/BREW-aider-CVE-2026-73620.json

@@ -2,10 +2,11 @@
   "schema_version": "1.7.3",
   "id": "BREW-aider-CVE-2026-73620",
   "published": "2026-08-14T08:50:09Z",
-  "modified": "2026-08-14T08:50:09Z",
+  "modified": "2026-09-10T18:50:25Z",
   "upstream": [
     "GHSA-3f7w-8rr8-f37f",
-    "CVE-2026-73620"
+    "CVE-2026-73620",
+    "PYSEC-2026-3949"
   ],
   "affected": [
     {

advisories/BREW-aider-CVE-2026-73621.json

@@ -2,10 +2,11 @@
   "schema_version": "1.7.3",
   "id": "BREW-aider-CVE-2026-73621",
   "published": "2026-08-14T08:50:09Z",
-  "modified": "2026-08-14T08:50:09Z",
+  "modified": "2026-09-10T18:50:25Z",
   "upstream": [
     "GHSA-p538-c434-8v24",
-    "CVE-2026-73621"
+    "CVE-2026-73621",
+    "PYSEC-2026-3950"
   ],
   "affected": [
     {

advisories/BREW-aider-CVE-2026-73622.json

@@ -2,10 +2,11 @@
   "schema_version": "1.7.3",
   "id": "BREW-aider-CVE-2026-73622",
   "published": "2026-08-14T08:50:09Z",
-  "modified": "2026-08-14T08:50:09Z",
+  "modified": "2026-09-10T18:50:25Z",
   "upstream": [
     "GHSA-94p4-4cq8-9g67",
-    "CVE-2026-73622"
+    "CVE-2026-73622",
+    "PYSEC-2026-3951"
   ],
   "affected": [
     {

advisories/BREW-aider-CVE-2026-73623.json

@@ -2,10 +2,11 @@
   "schema_version": "1.7.3",
   "id": "BREW-aider-CVE-2026-73623",
   "published": "2026-08-14T08:50:09Z",
-  "modified": "2026-08-14T08:50:09Z",
+  "modified": "2026-09-10T18:50:25Z",
   "upstream": [
     "GHSA-6p8h-3wgx-97gf",
-    "CVE-2026-73623"
+    "CVE-2026-73623",
+    "PYSEC-2026-3952"
   ],
   "affected": [
     {

advisories/BREW-aider-CVE-2026-73625.json

@@ -2,10 +2,11 @@
   "schema_version": "1.7.3",
   "id": "BREW-aider-CVE-2026-73625",
   "published": "2026-08-14T08:50:09Z",
-  "modified": "2026-08-14T08:50:09Z",
+  "modified": "2026-09-10T18:50:25Z",
   "upstream": [
     "GHSA-r9mr-m37c-5fr3",
-    "CVE-2026-73625"
+    "CVE-2026-73625",
+    "PYSEC-2026-3953"
   ],
   "affected": [
     {

advisories/BREW-aider-CVE-2026-76217.json

@@ -2,10 +2,11 @@
   "schema_version": "1.7.3",
   "id": "BREW-aider-CVE-2026-76217",
   "published": "2026-08-20T08:39:09Z",
-  "modified": "2026-09-09T23:40:56Z",
+  "modified": "2026-09-10T18:50:25Z",
   "upstream": [
     "GHSA-hh9p-6wh2-4mfc",
-    "CVE-2026-76217"
+    "CVE-2026-76217",
+    "PYSEC-2026-3841"
   ],
   "affected": [
     {

advisories/BREW-aider-CVE-2026-76218.json

@@ -2,10 +2,11 @@
   "schema_version": "1.7.3",
   "id": "BREW-aider-CVE-2026-76218",
   "published": "2026-08-20T08:39:09Z",
-  "modified": "2026-09-09T23:40:56Z",
+  "modified": "2026-09-10T18:50:25Z",
   "upstream": [
     "GHSA-9rj7-rf2p-w77r",
-    "CVE-2026-76218"
+    "CVE-2026-76218",
+    "PYSEC-2026-3840"
   ],
   "affected": [
     {

advisories/BREW-aider-CVE-2026-76219.json

@@ -2,10 +2,11 @@
   "schema_version": "1.7.3",
   "id": "BREW-aider-CVE-2026-76219",
   "published": "2026-08-20T08:39:09Z",
-  "modified": "2026-09-09T23:40:56Z",
+  "modified": "2026-09-10T18:50:25Z",
   "upstream": [
     "GHSA-4gmw-gg2m-w46p",
-    "CVE-2026-76219"
+    "CVE-2026-76219",
+    "PYSEC-2026-3838"
   ],
   "affected": [
     {

advisories/BREW-aider-CVE-2026-76220.json

@@ -2,10 +2,11 @@
   "schema_version": "1.7.3",
   "id": "BREW-aider-CVE-2026-76220",
   "published": "2026-08-20T08:39:09Z",
-  "modified": "2026-09-09T23:40:56Z",
+  "modified": "2026-09-10T18:50:53Z",
   "upstream": [
     "GHSA-wvpp-8hx9-p66j",
-    "CVE-2026-76220"
+    "CVE-2026-76220",
+    "PYSEC-2026-3843"
   ],
   "affected": [
     {

advisories/BREW-aider-CVE-2026-78679.json

@@ -2,10 +2,11 @@
   "schema_version": "1.7.3",
   "id": "BREW-aider-CVE-2026-78679",
   "published": "2026-09-09T23:40:56Z",
-  "modified": "2026-09-09T23:40:56Z",
+  "modified": "2026-09-10T18:50:25Z",
   "upstream": [
     "GHSA-3wxw-xv34-2frg",
-    "CVE-2026-78679"
+    "CVE-2026-78679",
+    "PYSEC-2026-3837"
   ],
   "affected": [
     {

advisories/BREW-mistral-vibe-CVE-2026-67322.json

@@ -2,10 +2,11 @@
   "schema_version": "1.7.3",
   "id": "BREW-mistral-vibe-CVE-2026-67322",
   "published": "2026-08-13T17:14:16Z",
-  "modified": "2026-09-10T00:31:16Z",
+  "modified": "2026-09-10T19:59:00Z",
   "upstream": [
     "GHSA-rwj8-pgh3-r573",
-    "CVE-2026-67322"
+    "CVE-2026-67322",
+    "PYSEC-2026-3842"
   ],
   "affected": [
     {

advisories/BREW-mistral-vibe-CVE-2026-67323.json

@@ -2,10 +2,11 @@
   "schema_version": "1.7.3",
   "id": "BREW-mistral-vibe-CVE-2026-67323",
   "published": "2026-08-13T17:14:16Z",
-  "modified": "2026-09-10T00:31:16Z",
+  "modified": "2026-09-10T19:59:00Z",
   "upstream": [
     "GHSA-956x-8gvw-wg5v",
-    "CVE-2026-67323"
+    "CVE-2026-67323",
+    "PYSEC-2026-3839"
   ],
   "affected": [
     {

advisories/BREW-mistral-vibe-CVE-2026-67324.json

@@ -2,10 +2,11 @@
   "schema_version": "1.7.3",
   "id": "BREW-mistral-vibe-CVE-2026-67324",
   "published": "2026-08-13T17:14:16Z",
-  "modified": "2026-08-23T21:08:24Z",
+  "modified": "2026-09-10T19:59:00Z",
   "upstream": [
     "GHSA-v396-v7q4-x2qj",
-    "CVE-2026-67324"
+    "CVE-2026-67324",
+    "PYSEC-2026-3947"
   ],
   "affected": [
     {

advisories/BREW-mistral-vibe-CVE-2026-67325.json

@@ -2,10 +2,11 @@
   "schema_version": "1.7.3",
   "id": "BREW-mistral-vibe-CVE-2026-67325",
   "published": "2026-08-13T17:14:16Z",
-  "modified": "2026-09-10T00:31:16Z",
+  "modified": "2026-09-10T19:59:00Z",
   "upstream": [
     "GHSA-2f96-g7mh-g2hx",
-    "CVE-2026-67325"
+    "CVE-2026-67325",
+    "PYSEC-2026-3836"
   ],
   "affected": [
     {

advisories/BREW-mistral-vibe-CVE-2026-73619.json

@@ -2,10 +2,11 @@
   "schema_version": "1.7.3",
   "id": "BREW-mistral-vibe-CVE-2026-73619",
   "published": "2026-08-14T09:22:15Z",
-  "modified": "2026-08-23T21:08:24Z",
+  "modified": "2026-09-10T19:59:00Z",
   "upstream": [
     "GHSA-539m-9xh6-q6rr",
-    "CVE-2026-73619"
+    "CVE-2026-73619",
+    "PYSEC-2026-3948"
   ],
   "affected": [
     {

advisories/BREW-mistral-vibe-CVE-2026-73620.json

@@ -2,10 +2,11 @@
   "schema_version": "1.7.3",
   "id": "BREW-mistral-vibe-CVE-2026-73620",
   "published": "2026-08-14T09:22:15Z",
-  "modified": "2026-08-23T21:07:02Z",
+  "modified": "2026-09-10T19:59:00Z",
   "upstream": [
     "GHSA-3f7w-8rr8-f37f",
-    "CVE-2026-73620"
+    "CVE-2026-73620",
+    "PYSEC-2026-3949"
   ],
   "affected": [
     {

advisories/BREW-mistral-vibe-CVE-2026-73621.json

@@ -2,10 +2,11 @@
   "schema_version": "1.7.3",
   "id": "BREW-mistral-vibe-CVE-2026-73621",
   "published": "2026-08-14T09:22:15Z",
-  "modified": "2026-08-23T21:08:24Z",
+  "modified": "2026-09-10T19:59:00Z",
   "upstream": [
     "GHSA-p538-c434-8v24",
-    "CVE-2026-73621"
+    "CVE-2026-73621",
+    "PYSEC-2026-3950"
   ],
   "affected": [
     {