Skip to content
OpenAdvisories

Product · huangxd-

danmu_api

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-116485 Scanner template

    danmu_api before 1.21.7 Authentication Bypass via Default Token in Env Endpoints

    danmu_api before 1.21.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to modify server environment configuration when the default TOKEN is used and ADMIN_TOKEN is unset. Attackers can send POST requests to /api/env/set,…

    huangxd- danmu_api