Packagist/wwbn/avideo CVE-2023-30854: high 8.8, EPSS 5.17%

Remote code injection in wwbn/avideo

Action: Upgrade wwbn/avideo to 12.4 or later.

composer require wwbn/avideo:12.4

Affected

Fixed versions

Sources

• osv: GHSA-6vrj-ph27-qfp3
• https://github.com/WWBN/AVideo/security/advisories/GHSA-6vrj-ph27-qfp3
• https://nvd.nist.gov/vuln/detail/CVE-2023-30854
• https://github.com/WWBN/AVideo/commit/020415d22f36d93ed865eb61994b49caa0f7f90a
• https://github.com/WWBN/AVideo

CVE-2023-30854 · published 2023-04-27T23:53:45Z · modified 2026-09-10T03:49:53.532874039Z · JSON