Glossary: Endpoint and Application Security

command injection

Building a shell command from user input so an attacker can add commands of their own. Bandit flags it as subprocess with shell=True.