Skip to content
OpenAdvisories

Vendor

bitscorp-mcp

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 7.0

    mcp-ffmpeg through 1.0.5 OS Command Injection via videoPath and outputDir

    mcp-ffmpeg through 1.0.5 contains an OS command injection vulnerability that allows attackers to run shell commands by supplying crafted videoPath or outputDir values to the resize-video, extract-audio and get-video-info tools. Attackers can embed $(), backti…