Cpe:2.3:a:synk:sweater_comb:*:*:*:*:*:*:*:*

Synk Sweater Comb before version 3.8.8 contains a command injection vulnerability in the expectGitBranch() function, allowing arbitrary OS command execution via crafted .vervet.yaml configuration files.