A command injection vulnerability in the video thumbnail rendering component of Karl Ward's files.gallery v0.3.0 through 0.11.0 allows remote attackers to execute arbitrary code via a crafted video file.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| files.photo.gallery(npm) | 0.3.0 | N/A | N/A |
CVSS Metrics
