https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-15T22:11:33.028369+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-110645 CVE-2026-110645 — Video-stitch before 2.0.0-beta.1 OS Command Injection via concat() and cut() 2026-10-15T22:11:33.029479+00:00

Affected: ArsalanDotMe video-stitch

Video-stitch before 2.0.0-beta.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying file names interpolated unquoted into shell-executed ffmpeg command lines. Attackers who influence file names passed to concat(), cut(), or merge() can inject shell metacharacters to run commands with the Node.js process privileges.