AIKIDO-2026-10910

TL;DR

Dulwich accepted several unsafe forms of repository-controlled input when archiving trees and ingesting Git pack data. A malicious repository could cause dulwich.archive.tar_stream to emit unsafe tar member paths, including traversal, .git, backslash, or colon-containing names, and crafted pack bytes could bypass trailer or object validation or trigger malformed delta handling failures. Consumers extracting generated archives could write files outside the intended directory, while fetch or clone paths could corrupt local object stores or trigger expensive failures on later reads. The fix rejects unsafe archive paths, verifies pack trailers, validates object payloads during disk pack ingestion, and rejects malformed deltas with explicit errors.