Incomplete List of Disallowed Inputs

Overview Affected versions of this package are vulnerable to Incomplete List of Disallowed Inputs via the ParseCommand process. An attacker can execute arbitrary operating system commands by injecting shell metacharacters into allowed command input, which are then interpreted by the configured...