AIKIDO-2025-10034

TL;DR

Affected versions of this package are vulnerable to remote code execution (RCE) due to improper validation and handling of configuration files. Specifically, an attacker can craft a malicious configuration file containing arbitrary code or commands that the application processes unsafely. When the application reads and executes the contents of this file, the embedded code runs with the same privileges as the application, allowing the attacker to execute arbitrary commands on the host system.