CVE-2026-33731
1 advisory.
Packagist/wwbn/avideo CVE-2026-33731: medium 6.5, EPSS 0.21%
AVideo has an Authorize.Net Webhook Signature Bypass that Enables Wallet Balance Inflation via Forged Payment Data
Action: Upgrade wwbn/avideo to 29.0 or later.
composer require wwbn/avideo:29.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 29.0 | - |
Fixed versions
| 29.0 |
Sources
- osv: GHSA-95jh-7r58-xmxw
- https://github.com/WWBN/AVideo/security/advisories/GHSA-95jh-7r58-xmxw
- https://github.com/WWBN/AVideo/commit/033e83ae904cacb99495dbea7cbcfb3738cf42e4
- https://github.com/WWBN/AVideo
CVE-2026-33731 · published · modified · JSON