Vulnerabilidades do Alexpasmantier Television

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Alexpasmantier Television: 2 registro(s), com versões afetadas e correções.

CVE-2026-112263 Alta · 7.8 CWE-78 19/10/2026

Television 0.15.0 through 0.15.9 OS Command Injection via External Action Formatting

Television (tv) 0.15.0 through 0.15.9 contains an OS command injection vulnerability that allows attackers to run shell commands through improperly escaped single quotes in format_command. Attackers can plant a file with a crafted name containing an apostrophe so that triggering an action like the default edit action executes commands with victim privileges.

CVE-2026-111876 Média · 5.3 CWE-74 18/10/2026

alexpasmantier television entry.rs output command injection

A vulnerability was found in alexpasmantier television up to 0.15.9. Affected by this issue is the function Entry::output of the file television/channels/entry.rs. Performing a manipulation of the argument raw results in command injection. The attack requires a local approach. The reported GitHub issue was closed with the label "not planned".