Cpe:2.3:a:pypdftk_project:pypdftk:*:*:*:*:*:python:*:*

The pypdftk library (<= 0.5) is vulnerable to OS command injection via insecure path handling in its core functions, allowing arbitrary command execution when using subprocess.Popen.