Skip to content
OpenAdvisories

Vendor

m1k1o

3 known vulnerabilities.

Products

neko 2 blog 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2026-116679

    Neko: Authorization bypass in legacy WebRTC input handling

    Neko is a a self-hosted virtual browser that runs in Docker and uses WebRTC. From version 3.0.0 until 3.1.5, Neko deployments with legacy mode and session.implicit_hosting enabled incorrectly authorize legacy WebRTC data-channel input because LegacyIsHost() e…

    m1k1o neko github.com/m1k1o/neko/server Go