Skip to content
OpenAdvisories

Vendor

gameyfin

1 known vulnerabilities.

Products

gameyfin 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-129131

    Gameyfin before 2.6.2 Missing Authorization in Hilla Endpoints

    Gameyfin before 2.6.2 contains a missing authorization vulnerability that allows unauthenticated attackers to bypass login-required mode by calling Hilla endpoints annotated with @AnonymousAllowed. Attackers can POST to synchronous endpoint methods such as Ga…

    gameyfin gameyfin