BBOT's gitdumper module could be abused to execute commands through a malicious git repository.
https://github.com/number000000/18739-D-CVE-1
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-33394
https://blog.blacklanternsecurity.com/p/bbot-security-advisory-gitdumper