CVE-2020-7640: OS Command Injection in pixl-class

Severity: Critical

CVSS Score: 9.8

pixl-class prior to 1.0.3 allows execution of arbitrary commands. The members argument of the create function can be controlled by users without any sanitization.