Skip to content

CVE record · 1 source

CVE-2026-110645

CVSS 9.8

Video-stitch before 2.0.0-beta.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying file names…

Vendor: Node.js
Product: ImageMagick / Ghostscript / FFmpeg / libxml2, Node.js
CVSS: 9.8
EPSS: 0.032 (p88)
Exposure class: Developer platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

23

CVE NVD 17d ago

Video-stitch before 2.0.0-beta.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying file names…

Video-stitch before 2.0.0-beta.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying file names interpolated unquoted into shell-executed ffmpeg command lines. Attackers who…

CVSS 9.8 CVE-2026-110645 Node.js