ffmpeg_image_toolkit vulnerabilities

CVEs whose affected-version data names the ffmpeg_image_toolkit package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-114523None

1w ago

Ffmpeg Image Toolkit - Highly critical - Remote Code Execution - SA-CONTRIB-2026-220

Improper Neutralization of Special Elements used in an OS Command ("OS Command Injection") vulnerability in Drupal Ffmpeg Image Toolkit allows OS Command Injection. This issue affects Ffmpeg Image Toolkit versions: from 0.0.0 to 1.0.3.

▾ SunlitDrupal · Ffmpeg Image ToolkitEPSS 0.53%via CVEORG