CVE-2015-7982

Versions of "gm" prior to 1.21.1 are affected by a command injection vulnerability. The vulnerability is triggered when user input is passed into "gm.compare", which fails to sanitize input correctly before calling the graphics magic binary...