Arbitrary Code Execution

LilyPond is vulnerable to Arbitrary Code Execution. An attacker can bypass the -dsafe protection mechanism via output-def-lookup or output-def-scope by injecting and executing malicious code through the .ly file...