CVE-2021-36376

dandavison delta before 0.8.3 on Windows resolves an executable’s pathname as a relative path from the current directory.

Source: CVE-2021-36376