External input alters the structure of a command sent to another system.
Avoid shelling out; use exec-style APIs with argument arrays and strict allowlists.
MITRE ATT&CK techniques associated with this weakness class (mapped via MITRE CAPEC). A vulnerability of this type could let an adversary carry out:
Security vulnerability in spark
Security vulnerability in spark
Security vulnerability in spark
Security vulnerability in shell-quote
Security vulnerability in pip
Security vulnerability in gitpython
Security vulnerability in gitpython
CVE-2026-102827
CVE-2026-102826
Security vulnerability in gitpython
Security vulnerability in ranger
Security vulnerability in gitpython