ariym CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL ariym CVE published 2026-10-14

CVE-2026-110640

CVE-2026-110640 is a critical OS command injection vulnerability in whisper-node through version 1.1.1. Attackers can execute commands by supplying crafted filePath or whisperOptions.language values to whisper(). This vulnerability allows attackers to inject shell metacharacters or $() substitution into the command string built by createCppCommand() and executed via shelljs exec(). Defenders should priori [truncated]