CVE Intelligence

Alexpasmantier Television vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Alexpasmantier Television: 2 record(s), with affected versions and fixes.

CVE-2026-112263 High · 7.8 CWE-78 Oct 19, 2026
Television 0.15.0 through 0.15.9 OS Command Injection via External Action Formatting
Television (tv) 0.15.0 through 0.15.9 contains an OS command injection vulnerability that allows attackers to run shell commands through improperly escaped single quotes in format_command. Attackers can plant a file with a crafted name containing an apostrophe so that triggering an action like the default edit action executes commands with victim privileges.
CVE-2026-111876 Medium · 5.3 CWE-74 Oct 18, 2026
alexpasmantier television entry.rs output command injection
A vulnerability was found in alexpasmantier television up to 0.15.9. Affected by this issue is the function Entry::output of the file television/channels/entry.rs. Performing a manipulation of the argument raw results in command injection. The attack requires a local approach. The reported GitHub issue was closed with the label "not planned".