[CRITICAL] Magento OS command injection via the WebAPI

PKSA-3x4h-dj99-1bb6 CVE-2021-21016 GHSA-792f-c8mp-2cr5

Affected package: magento/project-community-edition

Affected version: <=2.0.2

Reported by:
GitHub