Low risk ReDoS vuln

https://huntr.dev/bounties/8549d81f-dc45-4af7-9f2a-2d70752d8524/
gitpython-developers · Feb 20, 2022 · 75f4f63 · 75f4f63
1 parent d0b48f3
commit 75f4f63
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/git/remote.py b/git/remote.py
@@ -273,7 +273,7 @@ class FetchInfo(IterableObj, object):
     NEW_TAG, NEW_HEAD, HEAD_UPTODATE, TAG_UPDATE, REJECTED, FORCED_UPDATE, \
         FAST_FORWARD, ERROR = [1 << x for x in range(8)]
 
-    _re_fetch_result = re.compile(r'^\s*(.) (\[?[\w\s\.$@]+\]?)\s+(.+) -> ([^\s]+)(    \(.*\)?$)?')
+    _re_fetch_result = re.compile(r'^\s*(.) (\[[\w\s\.$@]+\]|[\w\.$@]+)\s+(.+) -> ([^\s]+)(    \(.*\)?$)?')
 
     _flag_map: Dict[flagKeyLiteral, int] = {
         '!': ERROR,