CVE-2026-100855
1 advisory.
Packagist/azuracast/azuracast CVE-2026-100855: medium 6.5
AzuraCast has Missing Permissions Check on Media File Download, Allowing Cross-Station Data Exfiltration
Action: Upgrade azuracast/azuracast to 0.23.6 or later.
composer require azuracast/azuracast:0.23.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.23.6 | - |
Fixed versions
| 0.23.6 |
Sources
- osv: GHSA-qff7-q5fm-8p76
- https://github.com/AzuraCast/AzuraCast/security/advisories/GHSA-qff7-q5fm-8p76
- https://github.com/AzuraCast/AzuraCast/commit/ba92dc3f0ea15a9c0ba0f4557d99a9a26004108f
- https://github.com/AzuraCast/AzuraCast
CVE-2026-100855 · published · modified · JSON