* Add vulnerability for gix-transport crate
Reproducer with `gix` (CLI) v0.29
* `gix clone 'ssh://-oProxyCommand=open$IFS-aCalculator/foo'`
- This will launch a calculator on OSX.
Fixed in `gix` (CLI) v0.30.
See https://secure.phabricator.com/T12961 for more details.
This issue was discovered by @vin01 whom I thank for their diligence!
* Add credits to researcher who found the issue: vin01
https://github.com/vin01