tinytag vulnerabilities

CVEs whose affected-version data names the tinytag package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-104266Medium· 6.5

2w ago

tinytag is a Python library for reading audio file metadata

tinytag is a Python library for reading audio file metadata. From 2.0.0 until 2.3.0, an M4A file containing a sub-atom with a size of zero inside a ---- atom can cause the metadata parser to stop advancing through the input. The custom-f…

▾ Sunlittinytag · tinytagEPSS 0.33%via NVD