PT-2018-10231

Name of the Vulnerable Software and Affected Versions LilyPond version 2.19.80 Description The issue allows remote attackers to conduct argument-injection attacks via a crafted URL. This is because the lilypond-invoke-editor in LilyPond does not validate strings before launching the program...