ngrok v4.3.3 and 5.0.0-beta.2 is vulnerable to Command Injection.
ngrok is Vulnerable to Command Injection