CVE-2026-33767
1 advisory.
Packagist/wwbn/avideo CVE-2026-33767: high
AVideo has SQL Injection via Partial Prepared Statement — videos_id Concatenated Directly into Query
Action: Upgrade wwbn/avideo to 26.0 or later.
composer require wwbn/avideo:26.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 26.0 | - |
Fixed versions
| 26.0 |
Sources
- osv: GHSA-fj74-qxj7-r3vc
- https://github.com/WWBN/AVideo/security/advisories/GHSA-fj74-qxj7-r3vc
- https://nvd.nist.gov/vuln/detail/CVE-2026-33767
- https://github.com/WWBN/AVideo/commit/0215d3c4f1ee748b8880254967b51784b8ac4080
- https://github.com/WWBN/AVideo
CVE-2026-33767 · published · modified · JSON