CVE-2021-3013: Ripgrep Project Ripgrep

Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days.

ripgrep before 13 on Windows allows attackers to trigger execution of arbitrary programs from the current working directory via the -z/--search-zip or --pre flag.

Affected products

• Ripgrep Project Ripgrep: before 13.0.0 (fixed in 13.0.0)

Published 2021-06-11. Last modified 2026-06-17.