pdf_info 0.5.3 is vulnerable to Command Execution because the Ruby code uses backticks instead of Open3.