Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via the process.run function during Liquidsoap configuration generation for live recording. An attacker can execute arbitrary system commands by supplying a specially crafted streamer username containing shell...