gitpython: GitPython: Submodule.move() follows an attacker-committed intermediate symlink outside the worktree
GitPython: Submodule.move() follows an attacker-committed intermediate symlink outside the worktree (moderate). GHSA-gq48-pqfc-9p58, CVE-2026-110860.
osv.devquote checked
- security advisory
- Your codeby hand
Nemotron fixes
In its own wordsmatches the page ✓
GitPython: Submodule.move() follows an attacker-committed intermediate symlink outside the worktree
What Teire looks for in your code
nothing to search for: checked by hand
Does it reach your code?