CVE-2026-110640

The whisper-node library (through version 1.1.1 ) is vulnerable to an OS command injection vulnerability in the whisper() function. The root cause is the improper neutralization of special elements within the command string built by createCppCommand() . Attackers can provide crafted filePath or w...