git arbitrary code execution vulnerability