{"schema":"vulnpedia.research/1","cve":"CVE-2026-110645","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/ArsalanDotMe/VideoStitch/pull/26","tags":["patch","issue-tracking","exploit"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:14.471Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:14.471Z","url":"https://github.com/ArsalanDotMe/VideoStitch/pull/26"},{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-14T20:34:06.275Z","url":"https://github.com/ArsalanDotMe/VideoStitch/pull/26"},{"source":"nvd","sourceId":"CVE-2026-110645","modified":"2026-10-15T14:47:05.720","url":"https://github.com/ArsalanDotMe/VideoStitch/pull/26"}]},{"url":"https://github.com/ArsalanDotMe/VideoStitch/commit/ba60353e6c3707e6ff5d89eb6d76c2c6cdb0df9b","tags":["patch"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:14.471Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:14.471Z","url":"https://github.com/ArsalanDotMe/VideoStitch/commit/ba60353e6c3707e6ff5d89eb6d76c2c6cdb0df9b"},{"source":"nvd","sourceId":"CVE-2026-110645","modified":"2026-10-15T14:47:05.720","url":"https://github.com/ArsalanDotMe/VideoStitch/commit/ba60353e6c3707e6ff5d89eb6d76c2c6cdb0df9b"}]},{"url":"https://github.com/ArsalanDotMe/VideoStitch/blob/f33560852c848fe572a79f45ae0e85a7bcb0d3b2/lib/videoconcat.js#L61","tags":["technical-description"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:14.471Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:14.471Z","url":"https://github.com/ArsalanDotMe/VideoStitch/blob/f33560852c848fe572a79f45ae0e85a7bcb0d3b2/lib/videoconcat.js#L61"},{"source":"nvd","sourceId":"CVE-2026-110645","modified":"2026-10-15T14:47:05.720","url":"https://github.com/ArsalanDotMe/VideoStitch/blob/f33560852c848fe572a79f45ae0e85a7bcb0d3b2/lib/videoconcat.js#L61"}]},{"url":"https://github.com/ArsalanDotMe/VideoStitch/blob/f33560852c848fe572a79f45ae0e85a7bcb0d3b2/lib/videocut.js#L96-L99","tags":["technical-description"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:14.471Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:14.471Z","url":"https://github.com/ArsalanDotMe/VideoStitch/blob/f33560852c848fe572a79f45ae0e85a7bcb0d3b2/lib/videocut.js#L96-L99"},{"source":"nvd","sourceId":"CVE-2026-110645","modified":"2026-10-15T14:47:05.720","url":"https://github.com/ArsalanDotMe/VideoStitch/blob/f33560852c848fe572a79f45ae0e85a7bcb0d3b2/lib/videocut.js#L96-L99"}]},{"url":"https://github.com/ArsalanDotMe/VideoStitch/tree/v2.0.0-beta.1","tags":["release-notes"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:14.471Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:14.471Z","url":"https://github.com/ArsalanDotMe/VideoStitch/tree/v2.0.0-beta.1"},{"source":"nvd","sourceId":"CVE-2026-110645","modified":"2026-10-15T14:47:05.720","url":"https://github.com/ArsalanDotMe/VideoStitch/tree/v2.0.0-beta.1"}]},{"url":"https://www.vulncheck.com/advisories/video-stitch-before-2.0.0-beta.1-os-command-injection-via-concat-and-cut","tags":["third-party-advisory"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:14.471Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:14.471Z","url":"https://www.vulncheck.com/advisories/video-stitch-before-2.0.0-beta.1-os-command-injection-via-concat-and-cut"},{"source":"nvd","sourceId":"CVE-2026-110645","modified":"2026-10-15T14:47:05.720","url":"https://www.vulncheck.com/advisories/video-stitch-before-2.0.0-beta.1-os-command-injection-via-concat-and-cut"}]},{"source":"euvd","sourceId":"EUVD-2026-101273","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101273","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-101273","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101273"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[]}