CVE-2026-110644 - nodejs-whisper through 0.3.1 OS Command Injection via convertToWavType
CVE ID :CVE-2026-110644 Published : Oct. 14, 2026, 3:17 p.m. | 15 minutes ago Description :nodejs-whisper through 0.3.1 contains an OS command injection vulnerability in convertToWavType() that allows attackers to execute commands by supplying crafted audio file paths. Attackers can provide...