Product
The mcp-ffmpeg package through 1.0.5 contains an OS command injection vulnerability in the resize-video, extract-audio, and get-video-info tools.