GHSA-g6pc-6676-c23j
Critical · 9.1CVSS
9.1
EPSS
—
Published
Jun 15, 2026
CISA due date
—
The record
Remotion: arbitrary file write vulnerability
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | remotion | 0 | 4.0.410 |
Related vulnerabilities
- CVE-2026-30121 remotion-dev remotion v4.0.409 was discovered to contain an arbitrary file write… Same vulnerability
- GHSA-2jqp-f4gr-44fr Remotion: remote code execution (RCE) vulnerability Also affects remotion
- CVE-2026-30120 remotion-dev remotion v4.0.409 was discovered to contain a remote code execution (RCE)… Also affects remotion
- CVE-2026-81579 In WibuKey for Windows before version 6.71, an untrusted pointer dereference in the… CWE-123
- CVE-2026-20469 In trusted_mem, there is a possible escalation of privilege due to improper input… CWE-123
- CVE-2026-45257 The KTLS receive path decrypted each record in place, assuming that the mbufs holding… CWE-123
- CVE-2026-43284 In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: avoid… CWE-123
- CVE-2026-41952 Local privilege escalation due to improper input validation. CWE-123