Skip to content
OpenAdvisories

Product · iv-org

Invidious

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.7
    CVE-2026-57946

    Invidious - Private Playlist Disclosure via Unauthenticated RSS Feed Endpoint

    Invidious before version 2.20260626.0 contains a broken access control vulnerability that allows unauthenticated attackers to retrieve private playlist contents by accessing the RSS feed playlist endpoint without authentication. Attackers can supply a playlis…

    iv-org Invidious