CVE-2019-10788

CVE-2019-10788 affects the im-metadata Node.js module (through version 3.0.1), enabling remote command execution via the exec argument due to improper validation of user-supplied input in metadata options. The incident is corroborated across multiple feeds (Red Hat, GHSA, OSV, NVD) and related ad...