when used in CGI mode remote attackers could inject command line arguments to php
The Open Build Service is an openSUSE project.