https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-28T16:21:02.876359+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-94106 fkie_cve-2026-94106 2026-09-28T16:21:02.902168+00:00

getID3 before 1.9.26 contains an OS command injection vulnerability in shell-out handlers that fail to escape filenames in command strings. Attackers can craft malicious filenames containing shell metacharacters to inject arbitrary commands executed with the privileges of the process embedding getID3.

 https://db.gcve.eu/vuln/ghsa-7c6f-jc48-6hfq GHSA-7c6f-jc48-6hfq 2026-09-28T16:21:02.902261+00:00

getID3 before 1.9.26 contains an OS command injection vulnerability in shell-out handlers that fail to escape filenames in command strings. Attackers can craft malicious filenames containing shell metacharacters to inject arbitrary commands executed with the privileges of the process embedding getID3.

 https://db.gcve.eu/vuln/ubuntu-cve-2026-94106 UBUNTU-CVE-2026-94106 2026-09-28T16:21:02.902291+00:00

Affected: Ubuntu:16.04:LTS: php-getid3, Ubuntu:18.04:LTS: php-getid3, Ubuntu:20.04:LTS: php-getid3, Ubuntu:22.04:LTS: php-getid3, Ubuntu:24.04:LTS: php-getid3, Ubuntu:26.04:LTS: php-getid3

getID3 before 1.9.26 contains an OS command injection vulnerability in shell-out handlers that fail to escape filenames in command strings. Attackers can craft malicious filenames containing shell metacharacters to inject arbitrary commands executed with the privileges of the process embedding getID3.