[Koha] Shellshock

With the finding of the most recent "Shellshock" vulnerability with the BASH shell, I'm wondering If Koha uses the BASH shell in any way? I'm pretty sure it does not, but just wanted to make sure. I realize that the Linux system Koha is running on likely has the BASH shell that probably has the vulnerability, but I'm just trying to ascertain if a potential hacker could get to system through the Koha application. Thanks! Steve