Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Ffmpegdotjs Project Subscribe
Filtered by product Ffmpegdotjs
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-23376 1 Ffmpegdotjs Project 1 Ffmpegdotjs 2021-04-22 7.5 HIGH 9.8 CRITICAL
This affects all versions of package ffmpegdotjs. If attacker-controlled user input is given to the trimvideo function, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_process exec function without input sanitization.