James-Heinrich Getid3
2 CVEs affecting James-Heinrich Getid3. Latest disclosed: 2026-09-20. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-94106 | High | 8.8 | 2026-09-20 | getID3 before 1.9.26 contains an OS command injection vulnerability in shell-out handlers that fail to escape filenames in command strings. Attackers can craft… |
CVE-2026-94108 | Medium | 6.5 | 2026-09-20 | getID3 through 1.9.26 contains an XML external entity injection vulnerability in the XML2array helper function that fails to properly disable entity loading on… |