{"id":"CVE-2021-3028","details":"git-big-picture before 1.0.0 mishandles ' characters in a branch name, leading to code execution.","aliases":["GHSA-x38j-4rr5-hqrj","PYSEC-2021-15"],"modified":"2026-07-08T23:58:54.891739Z","published":"2021-01-13T17:15:12.913Z","references":[{"type":"ADVISORY","url":"https://github.com/git-big-picture/git-big-picture/releases/tag/v1.0.0"},{"type":"FIX","url":"https://github.com/git-big-picture/git-big-picture/pull/27"},{"type":"FIX","url":"https://github.com/git-big-picture/git-big-picture/pull/62"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/git-big-picture/git-big-picture","events":[{"introduced":"0"},{"fixed":"3291cdb43baa0c7461073e8524dffffbf5297902"}],"database_specific":{"cpe":"cpe:2.3:a:git-big-picture_project:git-big-picture:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"1.0.0"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["v0.10.1","v0.10.0","v0.9.0","v0.8.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-3028.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}