Nagios NRPE 3.2.1 has Insufficient Filtering because for example nasty_metachars interprets \\n as the character \\ and the character n (not as the \\n newline sequence). This can cause command injection.