Borewit/music-metadata

GitHub

github.com

Releases340

Frequency1 week 6 days

Last Release 6 days ago

Stars1.29K

Metadata parser for audio and video media files. Supports file and stream inputs in Node.js and browser environments, extracting format, tag, and duration information.

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2026-32256 ↗	Mar 18, 2026Wednesday, 18 March 2026, 04:17	7.5 HIGH	—
music-metadata is a metadata parser for audio and video media files. Prior to version 11.12.3, music-metadata's ASF parser (`parseExtensionObject()` in `lib/asf/AsfParser.ts:112-158`) enters an infinite loop when a sub-object inside the ASF Header Extension Object has `objectSize = 0`. Version 11.12.3 fixes the issue.