Command Injection

xopen is vulnerable to command injection. The vulnerability exists in xopen(filepath) function in index.js because the command execution implementation is not properly handled which allows an attacker to inject and execute malicious commands.