https://bugzilla.redhat.com/show_bug.cgi?id=2127348

--- Doc Text *updated* by Avinash Hanwate ahanwate@redhat.com --- A flaw was found in the thenify package. The name argument provided to the package can be controlled by users without any sanitization, and this is provided to the eval function without any sanitization which leads to Arbitrary Code Execution.