CVE-2019-12735 Arbitrary Code Execution via Modelines https://github.com/numirias/security/blob/master/doc/2019-06-04_ace-vim-neovim.md "Beyond patching, it's recommended to disable modelines in the vimrc (set nomodeline), to use the securemodelines plugin, or to disable modelineexpr (since patch 8.1.1366, Vim-only) to disallow expressions in modelines."