Borewit Music-metadata — known CVE vulnerabilities

Every CVE whose affected-product data names Borewit Music-metadata, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2026-32256 — CVSS 7.5 (high): music-metadata is a metadata parser for audio and video media files. Prior to version 11.12.3, music-metadata's ASF parser…