Skip to content
OpenAdvisories

Package · Alpine

navidrome

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.9
    CVE-2025-48949

    Navidrome allows SQL Injection via role parameter

    Navidrome is an open source web-based music collection server and streamer. Versions 0.55.0 through 0.55.2 have a vulnerability due to improper input validation on the `role` parameter within the API endpoint `/api/artist`. Attackers can exploit this flaw to …

    navidrome navidrome github.com/navidrome/navidrome navidrome Alpine Go
  • High 7.4
    CVE-2025-48948

    Navidrome Transcoding Permission Bypass Vulnerability Report

    Navidrome is an open source web-based music collection server and streamer. A permission verification flaw in versions prior to 0.56.0 allows any authenticated regular user to bypass authorization checks and perform administrator-only transcoding configuratio…

    navidrome navidrome github.com/navidrome/navidrome navidrome Alpine Go