Skip to content
OpenAdvisories

Product · anshulkharb

thumbnail

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-110650

    Thumbnail through 1.5 OS Command Injection via generate_thumbnail File Paths

    The thumbnail Python package through 1.5 contains an OS command injection vulnerability in generate_thumbnail() that allows attackers to execute commands by supplying shell metacharacters in file paths. Attackers who control a file name passed to generate_thu…

    anshulkharb thumbnail