CVE-2014-1927

The CVE-2014-1927 entry concerns the shell_quote function in python-gnupg 0.3.5, which does not properly quote strings and can allow context-dependent attackers to execute arbitrary code via shell metacharacters. The documented vector examples reference using "$(" command-substitution sequences, ...