Priority HIGH 66
music-metadata is a metadata parser for audio and video media files.
Borewit
Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
Borewit records in CISA KEVNo Borewit vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
7 records
TI-2026-69688 CVE-2026-107392 · GHSA-8j4c-6x6g-rq3j
Unhandled rejection in music-metadata DSF parser crashes process
Priority HIGH 66
music-metadata is a metadata parser for audio and video media files.
TI-2026-69697 CVE-2026-107388 · GHSA-jjpr-9cvf-cq55
Unvalidated ID3v2 tag size in music-metadata causes memory exhaustion
Priority MEDIUM 61
music-metadata is a metadata parser for audio and video media files.
TI-2026-69683 CVE-2026-107389 · GHSA-5gfj-9q3v-qfp3
Excessive memory allocation in music-metadata EBML parser
Priority MEDIUM 61
music-metadata is a metadata parser for audio and video media files.
TI-2026-69681 CVE-2026-107387 · GHSA-53v6-4h7p-p4gj
Uncontrolled memory allocation in music-metadata APEv2 parser
Priority MEDIUM 61
music-metadata is a metadata parser for audio and video media files.
TI-2026-24785 CVE-2026-32256 · GHSA-v6c2-xwv6-8xf7
music-metadata has an infinite loop vulnerability in ASF parser
Priority LOW 39
music-metadata is a metadata parser for audio and video media files.
TI-2026-69694 CVE-2026-107391 · GHSA-f94x-6692-553q
Infinite loop in music-metadata MP4 parser causes denial of service
Priority LOW 33
music-metadata is a metadata parser for audio and video media files.