[simiki] Command Injection in Simiki

Command Injection in Simiki v1.6.2.1 and prior allows remote attackers to execute arbitrary system commands via line 64 of the component ‘simiki/blob/master/simiki/config.py’.

References

• https://nvd.nist.gov/vuln/detail/CVE-2020-19001
• https://github.com/tankywoo/simiki/issues/123
• https://github.com/advisories/GHSA-w873-xcqq-x922