Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via the ExecTool component in pkg/tools/shell.go due to insufficient input validation in the guardCommand function. An attacker can execute arbitrary operating system commands by crafting input that bypasses the...