← All KD5FMU repositories

Play-Audio-ASL3-Node

https://github.com/KD5FMU/Play-Audio-ASL3-Node · Shell · 2 findings · Review date 2026-07-11

Executive Summary

<p align="center">

<p align="center">

Summary Counts

0
Critical Security
0
High Security
1
Medium Security
0
Low Security
0
Critical Bugs
0
High Bugs
1
Medium Bugs
0
Low Bugs

Quick Reference

IDSeverityCategoryFileLinesFinding
PLAYNODE-001 Medium Security playaudio.sh 18 Unquoted audio path in rpt localplay
PLAYNODE-002 Medium Bug playaudio.sh 5 Default NODE placeholder YOUR_NODE_NUMBER

Medium Issues

[PLAYNODE-001] Unquoted audio path in rpt localplay

playaudio.sh : 18

asterisk -rx "rpt localplay ${NODE} $1" embeds $1 unquoted.

Impact: Metacharacters in audio path could alter CLI parsing.

[PLAYNODE-002] Default NODE placeholder YOUR_NODE_NUMBER

playaudio.sh : 5

Script will not work until operator replaces placeholder.

Impact: Failed playback if deployed without configuration.