Vulnerability record: CVE-2013-7285 in x-stream/xstream (version 1.4.6)
Weakness: CWE-078 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
GitHub Security Advisory: GHSA-f554-x222-wgf7
Repository: https://github.com/x-stream/xstream
Buggy commit: 768c6e417a75e7732fc591bee844e5e81af56a7d
Fix commit(s): 6344867dce6767af7d0fe34fb393271a6456672d