GitPython explicitly treats helper-command options as unsafe because they can be used to execute arbitrary commands: git/repo/base.py:145-153 marks clone options such as --upload-pack, -u, --config, ...

GitPython: Unsafe option check validates multi_options before shlex.split transformation High severity GitHub Reviewed Published 3 weeks ago in gitpython-developers/GitPython • Updated 19 hours ago ...