Skip to content

3.1.52 Security

Latest
Latest

Choose a tag to compare

View all tags
@Byron Byron released this 16 Jul 03:17
3.1.52
This tag was signed with the committer’s verified signature.
Byron Sebastian Thiel
GPG key ID: 9CB5EE7895E8268B
Verified
Learn about vigilant mode.
f8b6df5
This commit was signed with the committer’s verified signature.
Byron Sebastian Thiel
GPG key ID: 9CB5EE7895E8268B
Verified
Learn about vigilant mode.

GHSA-rwj8-pgh3-r573: Environment-variable exfiltration via os.path.expandvars() on Repo.clone_from() URL

What's Changed

  • Skip cross-drive relative config test on Windows by @Byron in #2171
  • fix: preserve literal clone URLs by @Byron in #2172

Full Changelog: 3.1.51...3.1.52

Contributors

Byron
Assets 2
Loading