Skip to content
OpenAdvisories

Product · jishi

node-sonos-http-api

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.3
    CVE-2026-2629

    jishi node-sonos-http-api TTS Provider mac-os.js Promise os command injection

    A weakness has been identified in jishi node-sonos-http-api up to 3776f0ee2261c924c7b7204de121a38100a08ca7. Affected is the function Promise of the file lib/tts-providers/mac-os.js of the component TTS Provider. This manipulation of the argument phrase causes…

    jishi node-sonos-http-api