SourceTree for Windows is affected by a command injection vulnerability in URI handling. The vulnerability can be triggered through a browser or the SourceTree interface.
- Versions of SourceTree for Windows starting with 0.8.4b before version 188.8.131.52 are affected by this vulnerability.
- Upgrade SourceTree for Windows to version 184.108.40.206 or higher from https://www.sourcetreeapp.com/
We would like to credit Yu Hong for reporting this issue to us.
For additional details see the full advisory.