Code execution via current-directory executable search

Uncontrolled search path in dandavison delta before 0.8.3 on Windows allows local users to execute code via a planted executable. Command::new receives bare git and pager executable names, so Windows searches the current directory and can launch an attacker-controlled file before a trusted program. Exploitation requires a user to run delta from an attacker-writable directory; the planted process then executes with that user’s privileges.