Product
The bestzip library improperly handles file paths passed to the system zip utility, allowing attackers to inject command line flags and execute arbitrary code by passing paths beginning with hyphens.