the simple-git RCE exists because the filter and git disagreed on case sensitivity. and nobody noticed for years.