github_osv/GHSA-h632-p764-pjqm
DataFlow upload remote code execution vulnerability
### Impact
An administrator with the permissions to upload files via DataFlow and to create products was able to execute arbitrary code via the convert profile.
gitlab/packagist/openmage/magento-lts/GMS-2023-157
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in openmage/magento-lts.