Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via the builder process. An attacker can execute arbitrary commands within the builder pod context by supplying crafted values to the Environment.spec.builder.command field when creating or updating Environment CRDs in...