Skip to content

CVE record · 1 source

CVE-2026-110644

CVSS 9.8

nodejs-whisper through 0.3.1 contains an OS command injection vulnerability in convertToWavType() that allows attackers to execute commands by…

Vendor: Node.js
Product: ImageMagick / Ghostscript / FFmpeg / libxml2, Node.js
CVSS: 9.8
EPSS: 0.027 (p86)
Exposure class: Developer platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

23

CVE NVD 17d ago

nodejs-whisper through 0.3.1 contains an OS command injection vulnerability in convertToWavType() that allows attackers to execute commands by…

nodejs-whisper through 0.3.1 contains an OS command injection vulnerability in convertToWavType() that allows attackers to execute commands by supplying crafted audio file paths. Attackers can provide file names containing $()…

CVSS 9.8 CVE-2026-110644 Node.js