Skip to content
OpenAdvisories

Vendor

iv-org

2 known vulnerabilities.

Products

Invidious 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-58447

    Invidious - Cross-User Playlist Video Deletion via Missing Ownership Check

    Invidious through 2.20260626.0, fixed in commit 77ad416, contains a broken object level authorization vulnerability that allows authenticated attackers to delete videos from other users' playlists by supplying an arbitrary global video index in the remove_vid…

    iv-org Invidious