thumbnail Git security vulnerability announced