music-metadata (npm) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the npm package music-metadata, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (1)

• CVE-2026-32256 — CVSS 7.5 (high): music-metadata is a metadata parser for audio and video media files. Prior to version 11.12.3, music-metadata's ASF parser…