Product
Frictionless Framework versions up to 5.20.0rc1 contain an OS command injection vulnerability in the explore console, allowing arbitrary command execution via crafted datapackage.json files.