CVE-2026-110647 - Turnpress through 0.4.2 OS Command Injection via Crafted .docx File Names
CVE ID :CVE-2026-110647 Published : Oct. 14, 2026, 3:17 p.m. | 15 minutes ago Description :Turnpress through 0.4.2 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying .docx files with crafted names. The convertDocxToHtml function in...