CVE-2021-3013: 
Rust vulnerability analysis and mitigation

CVE-2021-3013 is a security vulnerability discovered in ripgrep versions before 13 on Windows systems. The vulnerability allows attackers to trigger execution of arbitrary programs from the current working directory via the -z/--search-zip or --pre flag. The issue was disclosed on June 11, 2021 (NVD, MITRE).

The vulnerability has a CVSS v3.1 Base Score of 9.8 (CRITICAL) with vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. The issue specifically affects the -z/--search-zip and --pre flags functionality in ripgrep when running on Windows systems, where these flags could be exploited to execute arbitrary programs located in the current working directory (NVD).

If exploited, this vulnerability allows attackers to execute arbitrary programs from the current working directory on affected Windows systems. This could lead to unauthorized code execution with the privileges of the user running ripgrep (NVD).

The vulnerability was fixed in ripgrep version 13.0.0. Users should upgrade to this version or later to mitigate the security risk. The fix addresses the security hole that allowed arbitrary program execution via the -z/--search-zip and --pre flags on Windows systems (Ripgrep Changelog).