git-big-picture Code Execution

CRITICAL 9.8CVE-2021-3028 · GHSA-x38j-4rr5-hqrj · PYSEC-2021-15 · Published 13/01/2021 · updated 17/06/2026

In short

CVE-2021-3028 is a CRITICAL (CVSS 9.8) vulnerability affecting git-big-picture, git-big-picture (git-big-picture project).
Chance of exploitation in the next 30 days (EPSS): 2.9%, higher than 87.1% of all vulnerabilities.
Fix: update to 1.0.0 or later.

Package	Affected versions	Patched versions
git-big-picture PyPI	`< 1.0.0`	`1.0.0`
git-big-picture git-big-picture_project	`< 1.0.0`	`1.0.0`

git-big-picture before 1.0.0 mishandles ' characters in a branch name, leading to code execution.

NVD description

git-big-picture before 1.0.0 mishandles ' characters in a branch name, leading to code execution.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.