npub1fw…qnhyf on Nostr: npub16mtxp…dpnwy Not arbitrary code, but OpenSCAD does load files from different ...

npub16mtxp68k8c3p2sj0wzhagt3kd8ywkvzlkfyt3vrx9cahzfz000vs8dpnwy (npub16mt…pnwy) Not arbitrary code, but OpenSCAD does load files from different formats with more focus on compatibility than security, and >20 open issues around segfaults.
Not a bad situation for a program that is usually run with trusted input, but I'd guess that all that keeps this from being exploited in a thumbnailer is lack of install base.