Command Injection

git-dummy-commit is vulnerable to command injection attacks. The application does not sanitize the filename parameter, allowing a malicious user to inject and execute arbitrary commands.