CVE-2026-55173
HIGH SEVERITYCVSS Score & Metrics
Base Score
8.1 / 10
Vulnerability Description
AVideo has an incomplete fix of CVE-2026-33482: sanitizeFFmpegCommand still allows a single '&' (background operator), giving OS command execution at the same execAsync sh -c sink
Vulnerability Details
Published Date
Last Modified
Source
GitHub
Vendor
composer
Product
wwbn/avideo
Discussion (0)
Add Comment
No comments yet. Be the first!