`grep-cli` may run arbitrary executables on Windows

On Windows in versions of grep-cli prior to 0.1.6, it's possible for some of the routines to execute arbitrary executables. In particular, a quirk of the Windows process execution API is that it will automatically consider the current directory before other directories when resolving relative...

PT-2021-18619

Name of the Vulnerable Software and Affected Versions ripgrep versions prior to 13 grep-cli versions prior to 0.1.6 Description The issue allows attackers to trigger execution of arbitrary programs from the current working directory via the -z/--search-zip or --pre flag. This is possible due to a...