PT-2026-26479

Summary The uploadVideoToLinkedIn method in the SocialMediaPublisher plugin constructs a shell command by directly interpolating an upload URL received from LinkedIn's API response, without sanitization via escapeshellarg. If an attacker can influence the LinkedIn API response via MITM, compromis...

Malicious code in linkedin-service (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1879 Malicious code in linkedin-service (npm)

--- -= Per source details. Do not edit below this line.=-...