karuppiah7890 CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL karuppiah7890 CVE published 2026-10-12

CVE-2020-37279

This debrief summarizes CVE-2020-37279, an OS command injection vulnerability in easy-pdf-merge versions 0.1.0 through 0.2.6. The vulnerability allows attackers to execute commands by injecting shell metacharacters into source paths, destination paths, or the maxHeap option. Defenders should assess potential exposure and impact, prioritizing verification of affected systems and application of patches or u [truncated]