Launchpad.net

CVE 2016-7793

sociomantic-tsunami git-hub before 0.10.3 allows remote attackers to execute arbitrary code via a crafted repository URL.

See the CVE page on Mitre.org for more details.