Description
git-bug before 0.7.2 has an Uncontrolled Search Path Element. It will execute git.bat from the current directory in certain PATH situations (most often seen on Windows).
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/MichaelMure/git-bug | < 0.7.2 | 0.7.2 | GHSA-m898-h4pm-pqfr |