VYPR

VideoStitch

by ArsalanDotMe

CVEs (1)

  • CVE-2026-110645CriOct 14, 2026
    risk 0.57cvss 9.8epss —

    Video-stitch before 2.0.0-beta.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying file names interpolated unquoted into shell-executed ffmpeg command lines. Attackers who influence file names passed to concat(), cut(), or…