Packagist/wwbn/avideo: medium 4.9

AVideo: Full-Read SSRF Through Unvalidated statsURL Parameter in plugin/Live/test.php

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-wxjx-r2j2-96fx
• https://github.com/WWBN/AVideo/security/advisories/GHSA-wxjx-r2j2-96fx
• https://github.com/WWBN/AVideo/commit/c95eafbdfccd5959c546a430c32fb3b6026f39ac
• https://github.com/WWBN/AVideo

published 2026-03-25T19:53:55Z · modified 2026-03-25T20:16:35.478780Z · JSON