```toml
[advisory]
id = "RUSTSEC-2021-0105"
package = "git-delta"
date = "2021-07-12"
url = "https://nvd.nist.gov/vuln/detail/CVE-2021-36376"
categories = ["file-disclosure"]
cvss = "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
aliases = ["CVE-2021-36376", "GHSA-5xg3-j2j6-rcx4"]
[affected]
os = ["windows"]
[versions]
patched = [">= 0.8.3"]
```

# Relative Path Traversal in git-delta

git-delta before 0.8.3 on Windows resolves an executable's pathname as a relative path from the current directory.