Packagist/wwbn/avideo CVE-2026-30885: medium 5.3, EPSS 0.39%

AVideo has Unauthenticated IDOR - Playlist Information Disclosure

Action: Upgrade wwbn/avideo to 25.0 or later.

composer require wwbn/avideo:25.0

Affected

Fixed versions

Sources

• osv: GHSA-6w2r-cfpc-23r5
• nvd: CVE-2026-30885
• https://github.com/WWBN/AVideo/security/advisories/GHSA-6w2r-cfpc-23r5
• https://github.com/WWBN/AVideo/commit/12adc66913724736937a61130ae2779c299445ca
• https://github.com/WWBN/AVideo

CVE-2026-30885 · published 2026-03-07T02:25:48Z · modified 2026-03-10T18:46:25.479610Z · JSON