566815 matches found
EUVD-2026-101268
Whisper-node through 1.1.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted filePath or whisperOptions.language values to whisper. Attackers can inject shell metacharacters or $ substitution into the command string built by...
CVE-2026-110640 Whisper-node through 1.1.1 OS Command Injection via filePath and language
Whisper-node through 1.1.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted filePath or whisperOptions.language values to whisper. Attackers can inject shell metacharacters or $ substitution into the command string built by...
CVE-2026-110639 @mborne/extract before 0.2.1 OS Command Injection via archivePath and targetDir
@mborne/extract before 0.2.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying shell metacharacters in archivePath or targetDir options. Attackers controlling these values passed to extract can inject commands into unquoted shelljs exec strings ...
EUVD-2026-101267
@mborne/extract before 0.2.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying shell metacharacters in archivePath or targetDir options. Attackers controlling these values passed to extract can inject commands into unquoted shelljs exec strings ...
CVE-2026-110639
The @mborne/extract library (versions prior to 0.2.1 ) is vulnerable to OS command injection via the archivePath and targetDir options. The root cause is the use of unquoted shelljs exec() strings within the unzip, 7z, tar-bz2, and gz extractors. An attacker who can control these input values can...
CVE-2026-110639 @mborne/extract before 0.2.1 OS Command Injection via archivePath and targetDir
@mborne/extract before 0.2.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying shell metacharacters in archivePath or targetDir options. Attackers controlling these values passed to extract can inject commands into unquoted shelljs exec strings ...
CVE-2026-110637 buildebooks before 0.2.2 OS Command Injection via kindlegen EPUB File Name
buildebooks before 0.2.2 contains an OS command injection vulnerability in lib/kindle.js that allows attackers to execute commands by supplying a crafted EPUB file name passed to kindlegen via childprocess.exec. Attackers can craft a book project with a malicious front-matter filename or project...
EUVD-2026-101266
doc-recog through 1.1.6 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted document paths to recog or tag. Attackers can embed $... or backtick command substitution in the file path, which DocData.readPDF passes to a shell-based pdftotext...
CVE-2026-110637 buildebooks before 0.2.2 OS Command Injection via kindlegen EPUB File Name
buildebooks before 0.2.2 contains an OS command injection vulnerability in lib/kindle.js that allows attackers to execute commands by supplying a crafted EPUB file name passed to kindlegen via childprocess.exec. Attackers can craft a book project with a malicious front-matter filename or project...
CVE-2026-110638
The doc-recog library (through version 1.1.6 ) is vulnerable to an OS command injection vulnerability. The flaw exists because the DocData._readPDF function passes unvalidated document paths from the recog() or tag() functions to a shell-based pdftotext execution call. Attackers can exploit this ...
CVE-2026-110637
The buildebooks software (versions before 0.2.2 ) is vulnerable to an OS command injection in the lib/kindle.js component. The root cause is the insecure use of child_process.exec when processing filenames. An attacker can execute arbitrary commands as the user running the application by crafting...
EUVD-2026-101265
buildebooks before 0.2.2 contains an OS command injection vulnerability in lib/kindle.js that allows attackers to execute commands by supplying a crafted EPUB file name passed to kindlegen via childprocess.exec. Attackers can craft a book project with a malicious front-matter filename or project...
CVE-2026-110638 doc-recog through 1.1.6 OS Command Injection via DocData._readPDF File Path
doc-recog through 1.1.6 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted document paths to recog or tag. Attackers can embed $... or backtick command substitution in the file path, which DocData.readPDF passes to a shell-based pdftotext...
EUVD-2026-101264
pypdftk through 0.5 contains an OS command injection vulnerability in fillform, dumpdatafields, and pdftkcmdutil that builds shell commands from caller-supplied paths. Attackers controlling pdfpath or outfile can inject shell metacharacters interpreted by subprocess.Popen with shell=True to execu...
CVE-2026-110636 pypdftk through 0.5 OS Command Injection via PDF and Output Paths
pypdftk through 0.5 contains an OS command injection vulnerability in fillform, dumpdatafields, and pdftkcmdutil that builds shell commands from caller-supplied paths. Attackers controlling pdfpath or outfile can inject shell metacharacters interpreted by subprocess.Popen with shell=True to execu...
CVE-2026-110636
The pypdftk library (through version 0.5 ) is vulnerable to OS command injection within the fill_form(), dump_data_fields(), and pdftk_cmd_util() functions. The root cause is the construction of shell commands using caller-supplied paths for pdf_path or out_file without proper sanitization. Becau...
CVE-2026-110636 pypdftk through 0.5 OS Command Injection via PDF and Output Paths
pypdftk through 0.5 contains an OS command injection vulnerability in fillform, dumpdatafields, and pdftkcmdutil that builds shell commands from caller-supplied paths. Attackers controlling pdfpath or outfile can inject shell metacharacters interpreted by subprocess.Popen with shell=True to execu...
EUVD-2026-101263
webp-converter before 3.0.0 contains an OS command injection vulnerability in src/webpconverter.js helpers that run libwebp binaries via execFile with shell enabled. Attackers controlling file names or option strings passed to cwebp, dwebp, gwebp, or webpmux functions can inject shell...
CVE-2026-110635
The webp-converter library, in versions prior to 3.0.0 , is susceptible to an OS command injection vulnerability within the src/webpconverter.js helpers. The root cause is the use of execFile with shell enabled to run libwebp binaries. Attackers who can control file names or option strings passed...
CVE-2026-110635 webp-converter before 3.0.0 OS Command Injection via File Names and Options
webp-converter before 3.0.0 contains an OS command injection vulnerability in src/webpconverter.js helpers that run libwebp binaries via execFile with shell enabled. Attackers controlling file names or option strings passed to cwebp, dwebp, gwebp, or webpmux functions can inject shell...