EvoScientist (< 0.2.5)

EvoScientist versions 0.1.0 through 0.2.4 contain an approval bypass vulnerability enabling attackers to execute arbitrary shell commands via unsanitized content ingestion.