github_osv/GHSA-5vpv-xmcj-9q85
Fix for arbitrary file deletion in customer media allows for remote code execution
### Impact
Magento admin users with access to the customer media could execute code on the server.
gitlab/packagist/openmage/magento-lts/GMS-2023-155
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in openmage/magento-lts.