Duke v1.2 and below was discovered to contain a code injection vulnerability via the component no.priv.garshol.duke.server.CommonJTimer.init.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-39013.json"