Veille CVE

Recherche « ArsalanDotMe video-stitch »

1 CVE

Critique 1 Élevée 0 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « ArsalanDotMe video-stitch » ✕
  1. CVE-2026-110645 9.8 Critique

    ArsalanDotMe video-stitch

    Video-stitch before 2.0.0-beta.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying file names interpolated unquoted into shell-executed ffmpeg command lines. Attackers who influence file names passed to concat(), cut(), or merge() can inject shell metacharacters to run commands with the Node.js process privileges.