Please update vim to >=8.1.365 to fix arbitrary code execution via modelines, see https://github.com/numirias/security/blob/master/doc/2019-06-04_ace-vim-neovim.md
*** This bug has been marked as a duplicate of bug 687394 ***