CVE-2024-51990: jj vulnerable to path traversal via crafted Git repositories

Severity: Critical

CVSS Score: 7.5

jj, or Jujutsu, is a Git-compatible VCS written in rust. In affected versions specially crafted Git repositories can cause `jj` to write files outside the clone. This issue has been addressed in version 0.23.0. Users are advised to upgrade. Users unable to upgrade should avoid cloning repos from unknown sources.