OS Command Injection

github.com/google/fscrypt is vulnerable to OS command injection. The vulnerability exists in fscryptmountpoints function of fscryptbashcompletion because the "compgen -W" is not single quoted which allows an attacker to inject and execute untrusted arbitrary strings...