Skip to content
OpenAdvisories

Product · ariym

whisper-node

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-110640

    Whisper-node through 1.1.1 OS Command Injection via filePath and language

    Whisper-node through 1.1.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted filePath or whisperOptions.language values to whisper(). Attackers can inject shell metacharacters or $() substitution int…

    ariym whisper-node