[HIGH] AVideo: Remote Code Execution via PHP Temp File in Encoder downloadURL

PKSA-xbpw-5md3-j3nz CVE-2026-33717 GHSA-8wf4-c4x3-h952

Affected package: wwbn/avideo

Affected version: <=26.0

Reported by:
GitHub