| Package | Affected versions | Patched versions |
|---|---|---|
| compressor | < 4.11.1 | 4.11.1 |
The issue was addressed by refusing external connections by default. This issue is fixed in Compressor 4.11.1. An unauthenticated user on the same network as a Compressor server may be able to execute arbitrary code.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free