Remote Code Execution (RCE)

poetrycore is vulnerable to remote code execution. The vulnerability exists in git.py when the application runs on Windows because the file hashes are not checked before installation which allows an attacker to inject and execute poetry commands...