CVE-2026-45620
1 advisory.
Packagist/WWBN/AVideo CVE-2026-45620: medium 5.3, EPSS 0.32%
AVideo CVE-2026-43881 incomplete fix - `objects/mention.json.php:17` is an unauthenticated user enumeration sibling that survives `d9cdc7024`
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 29.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-vpfx-pxqw-2w79
- https://github.com/WWBN/AVideo/security/advisories/GHSA-vpfx-pxqw-2w79
- https://nvd.nist.gov/vuln/detail/CVE-2026-45620
- https://github.com/WWBN/AVideo
- https://github.com/advisories/GHSA-6rvw-7p8v-mjfq
CVE-2026-45620 · published · modified · JSON