Shell Injection via Unescaped Input

A recurring security failure where untrusted strings flow into shell commands or templating without safe escaping, causing syntax errors or command behavior changes; mitigations include using environment variables and tools/templating that escape shell metacharacters.