Language: JavaScript
Label: vulnerable
CWE: CWE-78 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Code:
Graph.prototype.setTableRowHeight=function(b,e,g){g=null!=g?g:!0;var p=this.getModel();p.beginUpdate();try{var y=this.getCellGeometry(b);if(null!=y){y=y.clone();y.height+=e;p.setGeometry(b,y);var q=p.getParent(b),E=p.getChildCells(q,!0);if(!g){var L=mxUtils.indexOf(E,b);if(L<E.length-1){var T=E[L+1],G=this.getCellGeometry(T);null!=G&&(G=G.clone(),G.y+=e,G.height-=e,p.setGeometry(T,G))}}var M=this.getCellGeometry(q);null!=M&&(g||(g=b==E[E.length-1]),g&&(M=M.clone(),M.height+=e,p.setGeometry(q,M)))}}finally{p.endUpdate()}};