Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
openframe-image is an Openframe extension which adds support for images via fbi. openframe-image downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.