CVE-2026-33319

Packagist/wwbn/avideo CVE-2026-33319: medium 5.9

AVideo has an OS Command Injection via Unescaped URL in LinkedIn Video Upload Shell Command

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-w5ff-2mjc-4phc
• https://github.com/WWBN/AVideo/security/advisories/GHSA-w5ff-2mjc-4phc
• https://nvd.nist.gov/vuln/detail/CVE-2026-33319
• https://github.com/WWBN/AVideo/commit/67d932eb05e1bc9b36796f73ff4f9fb47590598b
• https://github.com/WWBN/AVideo

CVE-2026-33319 · published 2026-03-19T12:45:38Z · modified 2026-03-25T19:48:13.108998Z · JSON