GitPython < 3.1.58 allows command execution via an argument-injection bypass in check_unsafe_options. Supplying a crafted kwargs dict that combines a single-character kwarg with split_single_char_options=False to guarded methods (e.g., clone_from) can emit a joined token parsed as --upload-pack, enabling arbitrary OS command execution even with default allow_unsafe_options=False. Upgrade to 3.1.58.