Duke v1.2 and below was discovered to contain a code injection vulnerability via the component no.priv.garshol.duke.server.CommonJTimer.init.Referenceshttps://github.com/larsga/Duke/issues/273
