Command-line argument injection via embedded NUL delimiter

Command injection in NuProcess 1.2.0 through 2.0.4 allows attackers to inject arguments into Linux child processes through embedded NUL characters. The LinuxProcess path serializes the command array as a NUL-separated string for Java_java_lang_UNIXProcess_forkAndExec without rejecting embedded NULs, so an injected delimiter creates an extra argument. Exploitation requires an application to pass attacker-controlled command strings to the library on Linux, and the resulting process receives attacker-selected arguments.