VYPR

npm package

short-video-maker

pkg:npm/short-video-maker

Vulnerabilities (1)

  • CVE-2026-8115MedMay 7, 2026
    affected <= 1.3.4

    A security flaw has been discovered in gyoridavid short-video-maker up to 1.3.4. This affects an unknown part of the file src/server/routers/rest.ts of the component REST API. The manipulation of the argument req.params.tmpFile results in path traversal. The attack can be launche