ripgrep before 13 on Windows allows attackers to trigger execution of arbitrary programs from the current working directory via the -z/--search-zip or --pre flag.
CVSS 3.1CRITICAL 9.8·Network·No auth·No interaction·EPSS 0.01934·Published 2021-06-11·Fixed in 13.0.0, 0.1.6CWE-78