Hi@Byron ,

I am working on fixing theCVE-2022-24439 on our source code. Our product is currently having python3-git with 3.1.27 version. As I got to know that#1521 PR is fixing theCVE-2022-24439 so, started backporting the patches. But, after applying patches observed that in our python3-git source code there is no "test/" directory available and due to which patches are failing to apply.

Later on found that there no test/ directory in original tarball downloaded from thishttps://files.pythonhosted.org/packages/source/G/GitPython/GitPython-3.1.27.tar.gz

Could you please tell me if I can ignore the changes in test/ directory & apply the patches then, will it fix theCVE-2022-24439 issue ? If not then how to fix thisCVE-2022-24439 in this source code where test/ directory is not at available ?

Thanks.