42 matches found
Arbitrary Code Injection
Overview @remotion/studio is an APIs for interacting with the Remotion Studio Affected versions of this package are vulnerable to Arbitrary Code Injection through the process responsible for handling remote inputs. An attacker can execute arbitrary code by sending specially crafted requests over...
NPM: Remotion: arbitrary file write vulnerability
NPM: Remotion: arbitrary file write vulnerability discovered by ? in WordPress Npm remotion versions 4.0.410...
GHSA-G6PC-6676-C23J Remotion: arbitrary file write vulnerability
remotion-dev remotion v4.0.409 was discovered to contain an arbitrary file write vulnerability...
CVE-2026-30121
remotion-dev remotion v4.0.409 was discovered to contain an arbitrary file write vulnerability...
CVE-2026-30120
remotion-dev remotion v4.0.409 was discovered to contain a remote code execution RCE vulnerability...
@alok5953/videoextract (>=1.0.0, <=1.0.7), @anichart/remotion (>=0.0.6, <=0.2.1) +113 more potentially affected by CVE-2026-30120 via remotion (>=1.4.0-alpha.3b31a0de, <=4.0.409)
remotion NPM version =1.4.0-alpha.3b31a0de, =1.0.0, =0.0.6, =1.1.0, =1.1.0, =1.1.0, =0.1.16, =6.0.1, =8.0.3, =0.1.38, =1.5.2, =0.1.91, =0.1.0, =0.10.1 and more Source cves: CVE-2026-30120 Source advisory: MEND:CVE-2026-30120...
@alok5953/videoextract (>=1.0.0, <=1.0.7), @anichart/remotion (>=0.0.6, <=0.2.1) +113 more potentially affected by CVE-2026-30121 via remotion (>=1.4.0-alpha.3b31a0de, <=4.0.409)
remotion NPM version =1.4.0-alpha.3b31a0de, =1.0.0, =0.0.6, =1.1.0, =1.1.0, =1.1.0, =0.1.16, =6.0.1, =8.0.3, =0.1.38, =1.5.2, =0.1.91, =0.1.0, =0.10.1 and more Source cves: CVE-2026-30121 Source advisory: MEND:CVE-2026-30121...
CVE-2026-30120: Improper Control of Generation of Code
remotion-dev remotion v4.0.409 was discovered to contain a remote code execution RCE vulnerability...
CVE-2026-30121: Write-what-where Condition
remotion-dev remotion v4.0.409 was discovered to contain an arbitrary file write vulnerability...
CVE-2026-30120
remotion-dev remotion v4.0.409 was discovered to contain a remote code execution RCE vulnerability...
CVE-2026-30121
The remotion (specifically remotion-dev remotion) software is vulnerable to an arbitrary file write vulnerability in version 4.0.409 and all versions prior to 4.0.410 . This flaw allows an attacker to write files to an unintended location on the system, creating a write-what-where condition. Whil...
CVE-2026-30120
remotion-dev remotion v4.0.409 was discovered to contain a remote code execution RCE vulnerability...
CVE-2026-30121
remotion-dev remotion v4.0.409 was discovered to contain an arbitrary file write vulnerability...
CVE-2026-30121
remotion-dev remotion v4.0.409 was discovered to contain an arbitrary file write vulnerability...
CVE-2026-30121
remotion-dev remotion v4.0.409 was discovered to contain an arbitrary file write vulnerability...
CVE-2026-30120
remotion-dev remotion v4.0.409 was discovered to contain a remote code execution RCE vulnerability...
CVE-2026-30120
The remotion-dev remotion v4.0.409 and its related packages, @remotion/studio and @remotion/studio-server , are vulnerable to Arbitrary Code Injection . The root cause is a flaw in the process responsible for handling remote inputs, which allows an attacker to execute arbitrary code by sending sp...
security-advisories
Security Advisories This repository contains public security...
Malicious Package
Overview tailwindcss-remotion is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
