video-processing-editing
Warn
Audited by Socket on Sep 15, 2026
1 alert found:
SecuritySecurityscripts/video_editor.py
MEDIUMSecurityMEDIUM
scripts/video_editor.py
The code appears to be a legitimate video editing utility and shows no clear malicious behavior or data exfiltration. It contains a high-impact code-execution vulnerability from evaluating ffprobe-derived data with eval(), plus unsafe ffmpeg filter construction for subtitle paths and predictable temporary-file handling. Replace eval with strict numeric parsing, escape or safely pass subtitle paths, and use secure temporary files and atomic cleanup.
Confidence: 98%Severity: 78%
Audit Metadata