bugbakery / bugbakery/audapolis
Security
Open
- Dominant language
- TypeScript
- Stars
- 1.9k
- Forks
- 62
- PR merge metrics
- No merged PRs in 30d
Description
Currently there are a number of security issues, which we should address soon.
- [ ] Running ffmpeg on user-supplied files
Currently the backend uses pyDub, which just passes any unknown files to ffmpeg. This could be a huge security issue. We should think about (a) using a different library and/or (b) limiting the file types
- [ ] TODO
Contributor guide
Assessment
This issue has not been assessed yet.