CriticalCVSS 9.8
EPSS 3.3%
GNOME OCRFeeder before 0.8.4 allows OS command injection via shell metacharacters in a PDF or image filename.