Known vulnerabilities in getID3
Vendor:
James Heinrich
Software:
getID3
Software CPE:
cpe:2.3:a:james_heinrich:getid3:*:*:*:*:*:*:*:*
Website:
https://github.com/JamesHeinrich
Total vulnerabilities:
3
Public exploits:
0
Known exploited (KEV):
0
Breakdown by Severity Chart
Vulnerabilities (3)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU150784 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2026-94106 |
CWE-78 | Medium | 1.9.26 | 17.09.2026 |
SB20260917258 |
||
| #VU150783 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2026-94108 |
CWE-611 | Medium | 1.9.26 | 17.09.2026 |
SB20260917258 |
||
| #VU57205 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-40926 |
CWE-79 | Low | 1.9.21 | 11.10.2021 |
SB2021101110 |