GHSA-rchw-322g-f7rm: osctrl is Vulnerable to OS Command Injection via Environment Configuration

osctrl-admin has a vulnerability where an authenticated administrator can inject arbitrary shell commands (OS command injection, where an attacker runs unauthorized commands on a system) through the hostname parameter when setting up environments. These commands get embedded into enrollment scripts and execute on every computer that enrolls using that compromised environment, running with the highest privilege level before osquery (endpoint monitoring software) is even installed.