* SECURITY
  * Fix remote command execution vulnerability in upstream library (#5177) (#5196)