Skip to content

[Security] subprocess invocation uses shell=True #1241

Closed
Closed
[Security] subprocess invocation uses shell=True#1241
@tejasae-afk

Description

@tejasae-afk
tejasae-afk
opened on Mar 14, 2026

File: cli.py (line 2978)

shell=True makes command construction bugs much easier to exploit.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Fields

    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions