Launchpad.net

CVE 2021-3013

ripgrep before 13 on Windows allows attackers to trigger execution of arbitrary programs from the current working directory via the -z/--search-zip or --pre flag.

See the CVE page on Mitre.org for more details.