git/repo/base.py | 2 2 + 0 - 0 !
test/test_repo.py | 22 22 + 0 - 0 !
2 files changed, 24 insertions(+)

 [patch] block insecure non-multi options in clone/clone_from
 Follow-up to #1521

git/refs/symbolic.py | 2 2 + 0 - 0 !
test/test_refs.py | 15 15 + 0 - 0 !
2 files changed, 17 insertions(+)

 fix cve-2023-41040

This change adds a check during reference resolving to see if it
contains an up-level reference ('..'). If it does, it raises an
exception.

This fixes CVE-2023-41040, which allows an attacker to access files
outside the repository's directory.