CVE-2026-78676: Git Config Unsafe Serialization Quoting

Git config values are serialized without quoting comment characters ('#', ';') or edge whitespace, which can lead to config directive injection.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0Python
greprules fetch cve-2026-78676-git-config-unsafe-serialization-quoting --engine opengrep

Description

Git config values are serialized without quoting comment characters ('#', ';') or edge whitespace, which can lead to config directive injection.