GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — [GHSA-v396-v7q4-x2qj] Correct GitPython fix references by ECD5A · Pull Request #8842 · github/advisory-database

Conversation

@ECD5A

@ECD5A ECD5A commented Jul 28, 2026 •
edited
Loading

Uh oh!

There was an error while loading. Please reload this page.

Copy link
Copy Markdown

Updates

  • References

Comments

Summary

Replace the closed, unmerged remediation PR #2162 with the actual merged remediation PR #2168, and add the direct fixing commit for the joined-short-option bypass described by GHSA-v396-v7q4-x2qj.

Evidence

  • GitPython PR #2162 is closed without a merge commit.
  • GitPython PR #2168 was merged on 2026-07-12 and contains commit 56806080c1348749b07daa4a2024ce47b3cad285.
  • That commit explicitly rejects joined unsafe short-option forms including -uVALUE, -fuVALUE, -cVALUE, and -vcVALUE, matching this advisory's -u<helper> / -cKEY=VALUE bypass.
  • The commit is included in the upstream 3.1.50...3.1.51 comparison, consistent with the advisory's fixed version of 3.1.51.

Validation

  • Limited to one advisory JSON file
  • JSON syntax validated
  • Searched open and closed pull requests for the advisory ID; no duplicate found

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
All reactions
@ECD5A
Improve GHSA-v396-v7q4-x2qj fix references
a7b278f
@github-actions
github-actions Bot changed the base branch from main to ECD5A/advisory-improvement-8842 July 28, 2026 10:04
@ECD5A

ECD5A commented Sep 17, 2026

Copy link
Copy Markdown
Author

I rechecked the published advisory today: it still links to the closed, unmerged GitPython PR #2162. This correction points to the merged fix in GitPython #2168 and its fixing commit. Is there any additional information you need to review this change?
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@github-actions

github-actions Bot commented Nov 4, 2026

Copy link
Copy Markdown

👋 This pull request has been marked as stale because it has been open with no activity. You can: comment on the issue or remove the stale label to hold stale off for a while, add the Keep label to hold stale off permanently, or do nothing. If you do nothing this pull request will be closed eventually by the stale bot. Please see CONTRIBUTING.md for more policy details.
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@github-actions github-actions Bot added the Stale label Nov 4, 2026
@ECD5A

ECD5A commented Nov 4, 2026

Copy link
Copy Markdown
Author

Rechecked the published advisory record and the upstream fix today. It still references the closed, unmerged GitPython PR #2162. The actual fix was merged in GitPython PR #2168, specifically commit 56806080c1348749b07daa4a2024ce47b3cad285, which is included in the 3.1.50...3.1.51 comparison and shipped in release 3.1.51. This reference correction remains applicable for review.
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@github-actions github-actions Bot removed the Stale label Nov 5, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Uh oh!

There was an error while loading. Please reload this page.

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Uh oh!

There was an error while loading. Please reload this page.

1 participant

@ECD5A
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
You are visitor 01402520 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.