Skip to content
OpenAdvisories

Package · Debian

php-getid3

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-94108

    getID3 through 1.9.26 XML External Entity Injection via XML2array

    getID3 through 1.9.26 contains an XML external entity injection vulnerability in the XML2array helper function that fails to properly disable entity loading on PHP before 8.0. Attackers can craft malicious XML metadata in media files to disclose local files, …

    james-heinrich getid3 php-getid3 php-getid3 Debian Ubuntu
  • Medium 6.1
    CVE-2021-40926

    Cross-site scripting in demos/demo.mysqli.php in getID3

    Cross-site scripting (XSS) vulnerability in demos/demo.mysqli.php in getID3 1.X and v2.0.0-beta allows remote attackers to inject arbitrary web script or HTML via the showtagfiles parameter.

    php-getid3 php-getid3 james-heinrich/getid3 Debian Ubuntu Packagist