Advisories for Pypi/Git-Big-Picture package

git-big-picture mishandles ' characters in a branch name, leading to code execution.