GitHub Advisoryadvisory · Packagist
GHSA-vrpv-vw92-328g Multiple rtmpdump vulnerabilities
CRITICAL
Official page ↗
- Ecosystem
- Packagist
- Packages
- rudloff/rtmpdump-bin
- Severity
- Critical
- Weaknesses
- CWE-1395
- Reviewed
- 2025-02-06
Affected packages
• Packagist rudloff/rtmpdump-bin: <= 2.3.1 (no fix yet)
Description
The version of rtmpdump contained in this package has multiple known vulnerabilities.
Patches
This package is abandoned and should not be used anymore.
There is no patched release.
Workarounds
You should install rmtpdump from another source.
References
• https://github.com/advisories/GHSA-fm48-q5qq-894j
• https://github.com/advisories/GHSA-pfv7-grcx-8gcc
• https://github.com/advisories/GHSA-hg4c-2mw4-gwpm
Related
Weakness · CWE (1)
- CWE-1395 Dependency on Vulnerable Third-Party Component weakness
References
- https://github.com/Rudloff/rtmpdump-bin/security/advisories/GHSA-vrpv-vw92-328g web
- https://github.com/Rudloff/rtmpdump-bin package
- https://github.com/advisories/GHSA-fm48-q5qq-894j advisory
- https://github.com/advisories/GHSA-hg4c-2mw4-gwpm advisory
- https://github.com/advisories/GHSA-pfv7-grcx-8gcc advisory