env VAR='() { :;}; echo Bash is vulnerable!' bash -c "echo Bash is not vulnerable"