Unrated

This module enables you to use ffmpeg for image conversion The module doesn't sufficiently sanitize file names passed to the ffmpeg cli tool. This v...

CVE-2026-114523 First seen on SecPulse 02:35

Affected packages

Ecosystem	Package	Affected	Fixed
Packagist:https://packages.drupal.org/8	drupal/ffmpeg_image_toolkit	< 1.0.3	1.0.3

Original description The description as published by the source.

This module enables you to use ffmpeg for image conversion

The module doesn't sufficiently sanitize file names passed to the ffmpeg cli tool.

This vulnerability is mitigated by the fact that an attacker must be able to upload images on the site.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

NVD OSV