Skip to content
OpenAdvisories

Vendor

photostructure

1 known vulnerabilities.

Products

exiftool-vendored.js 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2026-43893 Public exploit

    exiftool-vendored: Argument injection via newline characters in tag names

    exiftool-vendored provides cross-platform Node.js access to ExifTool. Prior to 35.19.0, exiftool-vendored starts ExifTool in -stay_open True -@ - mode, where arguments are read from stdin one per line. In affected versions, several caller-supplied strings wer…

    photostructure exiftool-vendored.js exiftool-vendored npm