Suho Lee

Shell Command Injection

2

Due to the using of `/bin/sh -c` blablabla... it can execute an arbitrary command with forged 'input'. i.e. ```javascript const qpdf = require('node-qpdf'); qpdf.decrypt('/the/path/of/filename.pdf; ls -al; rm -rf /', 'somepassword');...

State declaration of @ui-router/angularjs has a property componentProvider (see [here](https://ui-router.github.io/ng1/docs/latest/interfaces/ng1.ng1statedeclaration.html#componentprovider)) and it should be annotated.

`fetch` override does not go well with Next.js' caching

10

# Bug report - [x] I confirm this is a bug with Supabase, not with my own application. - [x] I confirm I have searched the [Docs](https://docs.supabase.com), GitHub [Discussions](https://github.com/supabase/supabase/discussions), and...

## Connection with issue(s) This enables Web Authentication support on Android by adding an ability to call `setWebAuthenticationSupport` ([Link](https://developer.android.com/reference/androidx/webkit/WebSettingsCompat#getWebAuthenticationSupport(android.webkit.WebSettings))) on the underlying android.webkit.WebView. There are native WebAuthn integration available from...