An argument injection on Git during retrieval of repository history leads to remote code execution on the Pagure instance.