GHSA-G7MQ-RFJ2-25WQ Code Injection in total4

The package total4 before 0.0.43 are vulnerable to Arbitrary Code Execution via the U.set and U.get functions...