PhotoStructure exittool Argument Injection via Newlines: CVE Analysis and Mitigation

github.com 2026-05-22查看中文 →

Security AdvisoryHighPhotostructure

Affected:

photostructure/exiftool-vendored.js <=35.18.0

Fixed in:

v35.19.0

Referenced CVEs: CVE-2026-43893 · 8.2

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

CVE-2022-6995: webpack-dev-server HMR WebSocket Proxy Vulnerability 2026-06-16 Vue CLI Proxy Logic Flaw: sockjs-node Endpoint Incorrectly Proxied 2026-06-16 Zephyr OS net/tcp module use-after-free vulnerability fix in tcp_foreach 2026-06-16 Zephyr TCP Stack Use-After-Free Vulnerability Analysis (CVE-2026-10634) and Patch 2026-06-16 Multer DoS Vulnerability Analysis (CVE-2025-5038) 2026-06-16

Offline Archive

Offline screenshot & PDF are Pro-exclusive