Skip to content
OpenAdvisories

Vendor

james-heinrich

2 known vulnerabilities.

Products

getid3 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-94108

    getID3 through 1.9.26 XML External Entity Injection via XML2array

    getID3 through 1.9.26 contains an XML external entity injection vulnerability in the XML2array helper function that fails to properly disable entity loading on PHP before 8.0. Attackers can craft malicious XML metadata in media files to disclose local files, …

    james-heinrich getid3 php-getid3 php-getid3 Debian Ubuntu