npm/remotion CVE-2026-30120: critical 9.8, EPSS 0.87%
Remotion: remote code execution (RCE) vulnerability
Action: Upgrade remotion to 4.0.410 or later.
npm i remotion@4.0.410Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.0.410 | - |
Fixed versions
| 4.0.410 |
Sources
- osv: GHSA-2jqp-f4gr-44fr
- https://nvd.nist.gov/vuln/detail/CVE-2026-30120
- https://github.com/remotion-dev/remotion/pull/6378
- https://github.com/EaEa0001/security-advisories/blob/main/CVE-2026-30120.md
- https://github.com/remotion-dev/remotion
- https://github.com/remotion-dev/remotion/releases/tag/v4.0.410
CVE-2026-30120 · published · modified · JSON