WS-2020-0092

priest-runner through 0.3.12 are vulnerable to Command Injection. The package fails to sanitize input and passes it directly to a spawn call, which may allow attackers to execute arbitrary code in the system...