Vulnerabilities in git-tags-remote