Homepage

@remotion/studio-server@4.0.396

Run a Remotion Studio with a server backend

  • latest version

    4.0.507

  • latest non vulnerable version

    4.0.507

  • first published

    2 years ago

  • latest version published

    2 days ago

  • licenses detected

  • View studio-server package health on Snyk  (opens in a new tab)
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the @remotion/studio-server package. This does not include vulnerabilities belonging to this package’s dependencies.

    Fix vulnerabilities automatically

    Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

    Fix for free
    VulnerabilityVulnerable Version
    • C
    Arbitrary Code Injection

    @remotion/studio-server is a Run a Remotion Studio with a server backend

    Affected versions of this package are vulnerable to Arbitrary Code Injection through the process responsible for handling remote inputs. An attacker can execute arbitrary code by sending specially crafted requests over the network.

    How to fix Arbitrary Code Injection?

    Upgrade @remotion/studio-server to version 4.0.410 or higher.

    <4.0.410
    • H
    Write-what-where Condition

    @remotion/studio-server is a Run a Remotion Studio with a server backend

    Affected versions of this package are vulnerable to Write-what-where Condition via the file write process. An attacker can overwrite or create arbitrary files by sending specially crafted input to the application.

    How to fix Write-what-where Condition?

    Upgrade @remotion/studio-server to version 4.0.410 or higher.

    <4.0.410
    Go back to all versions of this package