https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-15T19:40:58.121331+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-110645 fkie_cve-2026-110645 2026-10-15T19:40:58.145615+00:00

Video-stitch before 2.0.0-beta.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying file names interpolated unquoted into shell-executed ffmpeg command lines. Attackers who influence file names passed to concat(), cut(), or merge() can inject shell metacharacters to run commands with the Node.js process privileges.

 https://db.gcve.eu/vuln/ghsa-8mh7-3vxw-frrx GHSA-8mh7-3vxw-frrx 2026-10-15T19:40:58.145699+00:00

Video-stitch before 2.0.0-beta.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying file names interpolated unquoted into shell-executed ffmpeg command lines. Attackers who influence file names passed to concat(), cut(), or merge() can inject shell metacharacters to run commands with the Node.js process privileges.