← All credits

Zachariah Mithani

18 vulnerability records and advisories credit this contributor.

CVE-2026-110650

Thumbnail through 1.5 OS Command Injection via generate_thumbnail File Paths

CVE-2026-110645

Video-stitch before 2.0.0-beta.1 OS Command Injection via concat() and cut()

CVE-2026-110647

Turnpress through 0.4.2 OS Command Injection via Crafted .docx File Names

CVE-2026-110642

xhtml2pdf before 0.2.19 OS Command Injection via startViewer File Name

CVE-2026-110637

buildebooks before 0.2.2 OS Command Injection via kindlegen EPUB File Name

CVE-2026-110649

Stills before 25.24.2 OS Command Injection via Media File Names

CVE-2026-110644

nodejs-whisper through 0.3.1 OS Command Injection via convertToWavType

CVE-2026-110639

@mborne/extract before 0.2.1 OS Command Injection via archivePath and targetDir

CVE-2026-110634

git-diff before 2.0.7 OS Command Injection via gitDiff Input Strings

CVE-2026-110648

@offactory/compress-fonts before 1.1.1 OS Command Injection via Font File Names