| Package | Affected versions | Patched versions |
|---|---|---|
| libflac | ≤ 1.2 |
Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allows user-assisted remote attackers to force a client to download arbitrary files via the MIME-Type URL flag (-->) for the FLAC image file in a crafted .FLAC file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free