Vulnerability record: CVE-2021-21345 in x-stream/xstream (version 1.4.15)
Weakness: CWE-078 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
GitHub Security Advisory: GHSA-hwpc-8xqv-jvj4
Repository: https://github.com/x-stream/xstream
Buggy commit: f04bbec461f2c2a6f1e2cf41770f42c64aae24a4
Fix commit(s): d5e51177634afea7213b9dc2d21f101d2e258db9