CVE-2024-27763 (CVSS 5.3): BasicSR 1.4.2 and earlier interpolates the SLURM_NODELIST environment variable into a shell command, letting a local attacker run arbitrary commands.