[HIGH] Snappy: Binary path is never shell-escaped due to an inverted is_executable check

PKSA-13wp-m816-mvdd CVE-2026-46643 GHSA-vpr4-p6fq-85jc

Affected package: knplabs/knp-snappy

Affected version: <=1.7.0

Reported by:
GitHub