Since we're talking about git, here's an interesting PR: https://github.com/libg...

		steveklabnik on April 18, 2016 \| parent \| context \| favorite \| on: Remote code execution, git, and OS X Since we're talking about git, here's an interesting PR: https://github.com/libgit2/libgit2/pull/3540 (EDIT: Some stuff has changed since February, so some of these claims are now out of date. But not all of them, the overall situation is still similar.)