TI-2026-74139 CVE-2026-110645 · GHSA-8mh7-3vxw-frrx
OS command injection in video-stitch via concat and cut
Priority HIGH 81
Video-stitch before 2.0.0-beta.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying file names interpolated unquoted into shell-executed ffmpeg command lines.