CVE-2026-54458
1 advisory.
Packagist/WWBN/AVideo CVE-2026-54458: critical 9.6, EPSS 0.51%
WWBN AVideo: Unauthenticated Stored DOM Cross-Site Scripting via Per-Client Metadata Broadcast in YPTSocket Plugin
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 29.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-8whc-2wmv-ww35
- https://github.com/WWBN/AVideo/security/advisories/GHSA-8whc-2wmv-ww35
- https://github.com/WWBN/AVideo/commit/8be71e53ccbe9b84b30870db386fb4d2b11e1c16
- https://github.com/WWBN/AVideo
CVE-2026-54458 · published · modified · JSON