Skip to content
OpenAdvisories

Vendor

alexta69

3 known vulnerabilities.

Products

3 results · Clear filters · Feed

  • Medium 5.6

    alexta69 MeTube Feed-metadata Thumbnail Fetch ytdl.py DownloadQueue.__write_feed_metadata_sync server-side request forgery

    A security vulnerability has been detected in alexta69 MeTube up to 2026.09.28. This vulnerability affects the function DownloadQueue.__write_feed_metadata_sync of the file app/ytdl.py of the component Feed-metadata Thumbnail Fetch Handler. Such manipulation …

  • Medium 5.3

    alexta69 MeTube Cookie File cookies.txt file access

    A vulnerability was determined in alexta69 MeTube up to 2026.06.10. The impacted element is an unknown function of the file /download/.metube/cookies.txt of the component Cookie File Handler. This manipulation causes files or directories accessible. The attac…

  • Medium 4.3

    alexta69 MeTube CORS Policy main.py on_prepare cross-domain policy

    A security vulnerability has been detected in alexta69 MeTube up to 2026.04.09. This affects the function on_prepare of the file app/main.py of the component CORS Policy. The manipulation leads to permissive cross-domain policy with untrusted domains. The att…