Homepage

exiftool-vendored@7.5.0

Efficient, cross-platform access to ExifTool

  • latest version

    37.2.0

  • latest non vulnerable version

    37.2.0

  • first published

    9 years ago

  • latest version published

    6 days ago

  • licenses detected

  • View exiftool-vendored package health on Snyk  (opens in a new tab)
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the exiftool-vendored package. This does not include vulnerabilities belonging to this package’s dependencies.

    Fix vulnerabilities automatically

    Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

    Fix for free
    VulnerabilityVulnerable Version
    • H
    Arbitrary Argument Injection

    exiftool-vendored is an Efficient, cross-platform access to ExifTool

    Affected versions of this package are vulnerable to Arbitrary Argument Injection via unsanitized input in tag names, filenames, or options passed to the ExifTool process. An attacker can manipulate file access or write output to arbitrary file system paths by injecting newline or carriage return characters into these arguments, causing unintended command arguments to be processed.

    How to fix Arbitrary Argument Injection?

    Upgrade exiftool-vendored to version 35.19.0 or higher.

    <35.19.0
    Go back to all versions of this package