Description
remotion-dev remotion v4.0.409 was discovered to contain a remote code execution (RCE) vulnerability.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | remotion | < 4.0.410 | 4.0.410 | GHSA-2jqp-f4gr-44fr |
Critical · 9.8
CVE-2026-30120
EUVD-2026-36743GHSA-2jqp-f4gr-44fr
Remotion: remote code execution (RCE) vulnerability
Published Jun 15, 2026 · Updated Jun 16, 2026 · Assigned by mitre