There’s a nasty hole in BASH (think Terminal) which affects Macs and should be patched. You can do so manually by following this thread on StackExchange. I patched my Macs already, but note that you need Homebrew, MacPorts, or Xcode installed to use this method.