Read the docs

james-heinrich

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

james-heinrich records in CISA KEV

No james-heinrich vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-63322 CVE-2026-94106 · GHSA-7c6f-jc48-6hfq

getID3 before 1.9.26 OS Command Injection via Unescaped Filenames

Priority MEDIUM 43

getID3 before 1.9.26 contains an OS command injection vulnerability in shell-out handlers that fail to escape filenames in command strings.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01664 Published 2026-09-20 Fixed in 1.9.26 CWE-78
TI-2026-63324 CVE-2026-94108 · GHSA-gmhw-pxmg-j22w

getID3 through 1.9.26 XML External Entity Injection via XML2array

Priority LOW 37

getID3 through 1.9.26 contains an XML external entity injection vulnerability in the XML2array helper function that fails to properly disable entity loading on PHP before 8.0.

CVSS 4.0HIGH 8.3 Network No auth No interaction EPSS 0.00543 Published 2026-09-20 No fix listed CWE-611
Open these records in search →