git-big-picture before 1.0.0 mishandles '
characters in a branch name, leading to code execution.
{ "nvd_published_at": "2021-01-13T17:15:00Z", "cwe_ids": [ "CWE-20" ], "severity": "CRITICAL", "github_reviewed": true, "github_reviewed_at": "2024-04-22T22:33:47Z" }