Unrated
In Chris Walz bit before 1.0.5 on Windows, attackers can run arbitrary code via a .exe file in a crafted repository.
CVE-2021-28954
First seen on SecPulse
References
- advisory github.com
- advisory vuln.ryotak.me