USN-4700-1: PyXDG vulnerability

USN-4700-1: PyXDG vulnerability

Alexandre D’Hondt discovered that PyXDG did not properly sanitize input.
An attacker could exploit this with a crafted .menu file to execute
arbitrary code.
Source: USN-4700-1: PyXDG vulnerability