PoC Archive PoC Archive

tag

Newline-Injection

High
exiftool-vendored.js Argument Injection via Newline-Delimited Tag Names (CVE-2026-43893)
CVE-2026-43893 / GHSA-cw26-7653-2rp5· exiftool-vendored (npm package, Node.js wrapper around Phil Harvey's ExifTool) patched