CVE-2021-28954

Name of the Vulnerable Software and Affected Versions: Chris Walz bit version 1.0.4 and earlier

Description: Attackers can run arbitrary code via a .exe file in a crafted repository. This issue affects Chris Walz bit on Windows, allowing for the execution of arbitrary code.

Recommendations: For versions prior to 1.0.5, update to version 1.0.5 or later to resolve the issue. As a temporary workaround, consider restricting access to crafted repositories to minimize the risk of exploitation.