TI-2026-74134 CVE-2026-110640 · GHSA-4wmj-6xhg-gxhm
OS command injection in whisper-node lets attackers run commands
Priority MEDIUM 53
Whisper-node through 1.1.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted filePath or whisperOptions.language values to whisper().