CVE-2026-33501

Packagist/wwbn/avideo CVE-2026-33501: medium 5.3, EPSS 0.52%

AVideo has Unauthenticated Information Disclosure of User Group Permission Mappings via Permissions Plugin

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-96qp-8cmq-jvq8
• https://github.com/WWBN/AVideo/security/advisories/GHSA-96qp-8cmq-jvq8
• https://nvd.nist.gov/vuln/detail/CVE-2026-33501
• https://github.com/WWBN/AVideo/commit/b583acdc9a9d1eab461543caa363e1a104fb4516
• https://github.com/WWBN/AVideo/commit/dc3c825734628bb32550d0daa125f05bacb6829c
• https://github.com/WWBN/AVideo

CVE-2026-33501 · published 2026-03-20T20:57:43Z · modified 2026-03-25T20:46:54.421524Z · JSON