Critical Rust flaw enables Windows command injection attacks

**Executive summary:** The report describes CVE-2024-24576, a critical command- and argument-injection flaw in the Rust standard library that can allow unauthenticated remote execution when programs spawn Windows batch files with untrusted arguments; affected Rust versions prior to 1.77.2 on Windows should be updated and mitigations applied, and several other languages/documentation were noted as impacted or updated.