CVE-2022-39253: A malicious actor could convince a victim to clone a
repository with a symbolic link pointing at sensitive information on the
victim's machine.
CVE-2022-39260: Allowing a malicious actor to intentionally overflow the
return value, leading to arbitrary heap writes.
CVE-2022-29187: privilege escalation