GHSA-c6mw-8xh8-gpq6: CodeWhale: Argument Injection in `git_blame` Tool Allows Arbitrary File Read Without Approval

The `git_blame` tool in DeepSeek-TUI has a vulnerability where it passes user input directly to a git command without validation, allowing an attacker to read arbitrary files on the system. By injecting a specially crafted argument like `--contents=/path/to/secret`, an attacker can trick the tool into displaying the contents of sensitive files (such as SSH keys or credentials) in the chat transcript, even though the tool is labeled as read-only and normally restricted to the workspace.