CVE-2026-31975: Shell Command Injection Via Cd Template Literalcve-2026-31975-shell-command-injection-via-cd-template-literal
Potential OS command injection: a template literal builds a shell command using `cd "${...}"` (or `Set-Location -Path "${...}"`) followed by additional `${...}` interpolations. If any interpolated value is attacker-controlled (e.g. taken from a request body, WebSocket payload, or query parameter), shell metacharacters in the value will break out of the quote
