CriticalCVSS 9.8
EPSS 4.0%
A command injection in git-dummy-commit v1.3.0 allows os level commands to be executed due to an unescaped parameter.