[java-sig-commits] [Bug 1532497] CVE-2017-1000487 plexus-utils: Mishandled strings in Commandline class allow for command injection