{"schema":"vulnpedia.research/1","cve":"CVE-2026-110635","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/scionoftech/webp-converter/pull/53","tags":["issue-tracking","patch"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:07.752Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:07.752Z","url":"https://github.com/scionoftech/webp-converter/pull/53"},{"source":"nvd","sourceId":"CVE-2026-110635","modified":"2026-10-16T19:18:44.867","url":"https://github.com/scionoftech/webp-converter/pull/53"}]},{"url":"https://github.com/scionoftech/webp-converter/pull/53#issuecomment-5091652605","tags":["vendor-advisory","patch","issue-tracking"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:07.752Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:07.752Z","url":"https://github.com/scionoftech/webp-converter/pull/53#issuecomment-5091652605"},{"source":"nvd","sourceId":"CVE-2026-110635","modified":"2026-10-16T19:18:44.867","url":"https://github.com/scionoftech/webp-converter/pull/53#issuecomment-5091652605"}]},{"url":"https://github.com/scionoftech/webp-converter/commit/f1b6724bc2e89f67ab05d51a854b4b1c5a99928a","tags":["patch"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:07.752Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:07.752Z","url":"https://github.com/scionoftech/webp-converter/commit/f1b6724bc2e89f67ab05d51a854b4b1c5a99928a"},{"source":"nvd","sourceId":"CVE-2026-110635","modified":"2026-10-16T19:18:44.867","url":"https://github.com/scionoftech/webp-converter/commit/f1b6724bc2e89f67ab05d51a854b4b1c5a99928a"}]},{"url":"https://github.com/scionoftech/webp-converter/blob/e09d963d772cae9ff6af63c268ca838ab334f861/CHANGELOG.md","tags":["release-notes"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:07.752Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:07.752Z","url":"https://github.com/scionoftech/webp-converter/blob/e09d963d772cae9ff6af63c268ca838ab334f861/CHANGELOG.md"},{"source":"nvd","sourceId":"CVE-2026-110635","modified":"2026-10-16T19:18:44.867","url":"https://github.com/scionoftech/webp-converter/blob/e09d963d772cae9ff6af63c268ca838ab334f861/CHANGELOG.md"}]},{"url":"https://github.com/scionoftech/webp-converter/blob/3729b65f1e904ab56b947ac3772020ce37a756c8/src/webpconverter.js#L41-L52","tags":["technical-description"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:07.752Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:07.752Z","url":"https://github.com/scionoftech/webp-converter/blob/3729b65f1e904ab56b947ac3772020ce37a756c8/src/webpconverter.js#L41-L52"},{"source":"nvd","sourceId":"CVE-2026-110635","modified":"2026-10-16T19:18:44.867","url":"https://github.com/scionoftech/webp-converter/blob/3729b65f1e904ab56b947ac3772020ce37a756c8/src/webpconverter.js#L41-L52"}]},{"url":"https://github.com/scionoftech/webp-converter","tags":["product"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:07.752Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:07.752Z","url":"https://github.com/scionoftech/webp-converter"},{"source":"nvd","sourceId":"CVE-2026-110635","modified":"2026-10-16T19:18:44.867","url":"https://github.com/scionoftech/webp-converter"}]},{"url":"https://www.vulncheck.com/advisories/webp-converter-before-3.0.0-os-command-injection-via-file-names-and-options","tags":["third-party-advisory"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:07.752Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:07.752Z","url":"https://www.vulncheck.com/advisories/webp-converter-before-3.0.0-os-command-injection-via-file-names-and-options"},{"source":"nvd","sourceId":"CVE-2026-110635","modified":"2026-10-16T19:18:44.867","url":"https://www.vulncheck.com/advisories/webp-converter-before-3.0.0-os-command-injection-via-file-names-and-options"}]},{"source":"euvd","sourceId":"EUVD-2026-101263","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101263","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-101263","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101263"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[]}