php-getid3 vulnerabilities (Debian)

4 vulnerabilities.

• php-getid3 Debian getID3 through 1.9.26 XML External Entity Injection via XML2array CVE-2026-94108 Fix available 8.3 HighSeptember 20, 2026
• php-getid3 Debian getID3 before 1.9.26 OS Command Injection via Unescaped Filenames CVE-2026-94106 Fix available 8.7 HighSeptember 20, 2026
• php-getid3 Debian Cross-site scripting in demos/demo.mysqli.php in getID3 CVE-2021-40926 Fix available 6.1 MediumOctober 1, 2021
• php-getid3 Debian getID3 is vulnerable to XML External Entity (XXE) CVE-2014-2053 Fix available 7.5 HighJune 4, 2014