CVE-2026-27732
1 advisory.
Packagist/wwbn/avideo CVE-2026-27732: high 8.1, EPSS 0.48%
AVideo has Authenticated Server-Side Request Forgery via downloadURL in aVideoEncoder.json.php
Action: Upgrade wwbn/avideo to 22.0 or later.
composer require wwbn/avideo:22.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 22.0 | - |
Fixed versions
| 22.0 |
Sources
- osv: GHSA-h39h-7cvg-q7j6
- https://github.com/WWBN/AVideo/security/advisories/GHSA-h39h-7cvg-q7j6
- https://nvd.nist.gov/vuln/detail/CVE-2026-27732
- https://github.com/WWBN/AVideo/commit/384ef2548093f4cbb1bfac00f1f429fe57fab853
- https://github.com/WWBN/AVideo
- https://github.com/WWBN/AVideo/releases/tag/22.0
CVE-2026-27732 · published · modified · JSON