All versions of the package puppet-facter are vulnerable to Command Injection via the getFact function due to improper input sanitization.
Products Affected
