[MEDIUM] WWBN AVideo has Stored XSS via Unanchored Duration Regex in Video Encoder Receiver

PKSA-gxyd-jpvf-3ngj CVE-2026-41061 GHSA-8pv3-29pp-pf8f

Affected package: wwbn/avideo

Affected version: <=29.0

Reported by:
GitHub