Packagist/wwbn/avideo CVE-2026-33767: high 8.8, EPSS 0.52%

AVideo has SQL Injection via Partial Prepared Statement — videos_id Concatenated Directly into Query

Action: Upgrade wwbn/avideo to 26.0 or later.

composer require wwbn/avideo:26.0

Affected

Fixed versions

Sources

• osv: GHSA-fj74-qxj7-r3vc
• nvd: CVE-2026-33767
• https://github.com/WWBN/AVideo/security/advisories/GHSA-fj74-qxj7-r3vc
• https://github.com/WWBN/AVideo/commit/0215d3c4f1ee748b8880254967b51784b8ac4080
• https://github.com/WWBN/AVideo

CVE-2026-33767 · published 2026-03-26T18:12:33Z · modified 2026-03-27T21:51:13.745542Z · JSON