Threats affecting pkg:github/gitstatus

Powerlevel10k versions before 1.20.19 contain a vulnerability in the bundled gitstatus/install script where an insecure temporary directory is reused if mktemp fails. This allows local attackers to pre-create a predictable temporary directory named gitstatus-install.tmp and replace the extracted gitstatusd binary, which then executes with the victim's privileges.