git-add-remote through 1.0.0 is vulnerable to Command Injection. It allows execution of arbitrary commands via the name argument.
Published April 3, 2020.
Git-add-remote Project Git-add-remote