james-heinrich getid3

• CVE-2026-94108 Medium 6.5 getID3 through 1.9.26 XML External Entity Injection via XML2array 0.5%
• CVE-2026-94106 High 8.8 getID3 before 1.9.26 OS Command Injection via Unescaped Filenames 1.7%