CVE-2025-27614: Tcl Unescaped Pipeline Heredoccve-2025-27614-tcl-unescaped-pipeline-heredoc
Constructing inline standard input (heredocs) for pipelines using double-quoted string interpolation (e.g., `"<<[join ...]"` or `"<<$var"`) without `list` protection can lead to OS command injection in Tcl. When this string is evaluated in a command pipeline (such as via `open |` or `exec`), literal newlines or pipe metacharacters (`|`) within the string are