Improper Neutralization of Special Elements used in a Command ('Command Injection')
All versions of package font-converter is vulnerable to Arbitrary Command Injection due to missing sanitization of input that potentially flows into the child_process.exec() function.