Approved changes feed: RSS · Atom

cpe:2.3:a:alexpasmantier:television:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAlexpasmantier (59b3e454-5dc5-5fd5-80d0-ce15445baf52)
ProductTelevision (154d5e5f-7610-5d69-be15-4cd12b1ac280)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-112263 vulnerable 2026-11-03 10:16:28.954845 Television 0.15.0 through 0.15.9 OS Command Injection via External Action Formatting
HIGH (7.8)
Television (tv) 0.15.0 through 0.15.9 contains an OS command injection vulnerability that allows attackers to run shell commands through improperly escaped single quotes in format_command. Attackers can plant a file with a crafted name containing an apostrophe so that triggering an action like the default edit action executes commands with victim privileges.
Published: 2026-10-19T13:55:13.736Z
Updated: 2026-10-22T02:47:14.637Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-111876 vulnerable 2026-11-03 10:16:11.338965 alexpasmantier television entry.rs output command injection
MEDIUM (5.3)
A vulnerability was found in alexpasmantier television up to 0.15.9. Affected by this issue is the function Entry::output of the file television/channels/entry.rs. Performing a manipulation of the argument raw results in command injection. The attack requires a local approach. The reported GitHub issue was closed with the label "not planned".
Published: 2026-10-18T05:45:17.843Z
Updated: 2026-10-19T19:05:34.026Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.