git-big-picture Code Execution

CRITICO 9.8CVE-2021-3028 · GHSA-x38j-4rr5-hqrj · PYSEC-2021-15 · Published 13/01/2021 · updated 17/06/2026

In breve

CVE-2021-3028 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda git-big-picture, git-big-picture (git-big-picture project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.9%, superiore al 87.1% delle vulnerabilità.
Correzione: aggiornare a 1.0.0 o successiva.

Package	Affected versions	Patched versions
git-big-picture PyPI	`< 1.0.0`	`1.0.0`
git-big-picture git-big-picture_project	`< 1.0.0`	`1.0.0`

git-big-picture before 1.0.0 mishandles ' characters in a branch name, leading to code execution.

NVD description

git-big-picture before 1.0.0 mishandles ' characters in a branch name, leading to code execution.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.