An issue in Mintty v.3.6.4 and before allows a remote attacker to execute arbitrary code via crafted commands to the terminal.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-39726.json"