CVE-2017-11353

yadm (yet another dotfile manager) 1.10.0 has a race condition related to mishandling of a “git clone” command, which potentially allows access to SSH and PGP keys.