The process library on Windows is vulnerable to a command injection via cmd.exe's interpretation of arguments when executing batch files (.bat, .cmd). This occurs because the library does not properly escape special characters in arguments passed to cmd.exe, allowing injection if arguments are influenced by untrusted input. The vulnerability affects versions of the process library before 1.6.23.0. A fix was released in version 1.6.19.0 with a follow-up fix in 1.6.23.0 to address additional edge cases.