~ / search / GHSA-2jqp-f4gr-44fr

GHSA-2jqp-f4gr-44fr

Remotion: remote code execution (RCE) vulnerability

Source: GitHub Advisory Database (reviewed) Critical CVE-2026-30120

Packages

EcosystemPackageAffectedFixed in
npm remotion < 4.0.410 4.0.410

Details

As written in the advisory (Markdown source, shown as plain text).

remotion-dev remotion v4.0.409 was discovered to contain a remote code execution (RCE) vulnerability.

References

External links from the advisory. They lead to third-party sites.