Skip to content
OpenAdvisories

Vendor

iv-org

2 known vulnerabilities.

Products

Invidious 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.7
    CVE-2026-57946

    Invidious - Private Playlist Disclosure via Unauthenticated RSS Feed Endpoint

    Invidious before version 2.20260626.0 contains a broken access control vulnerability that allows unauthenticated attackers to retrieve private playlist contents by accessing the RSS feed playlist endpoint without authentication. Attackers can supply a playlis…

    iv-org Invidious