PyPI/git-big-picture CVE-2021-3028: unknown, EPSS 2.94%

git-big-picture before 1.0.0 mishandles ' characters in a branch name, leading to code execution.

Action: Upgrade git-big-picture to 1.0.0 or later.

pip install git-big-picture==1.0.0

Affected

Fixed versions

Sources

• osv: PYSEC-2021-15
• https://github.com/git-big-picture/git-big-picture/pull/62
• https://github.com/git-big-picture/git-big-picture/pull/27
• https://github.com/git-big-picture/git-big-picture/releases/tag/v1.0.0
• https://github.com/advisories/GHSA-x38j-4rr5-hqrj

CVE-2021-3028 · published 2021-01-13T17:15:00Z · modified 2026-06-10T17:01:18.702895593Z · JSON