Skip to content
OpenAdvisories

Vendor

swingmx

1 known vulnerabilities.

Products

swingmusic 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-23877

    Directory Traversal & Filesystem can be accessed by a non-admin user

    Swing Music is a self-hosted music player for local audio files. Prior to version 2.1.4, Swing Music's `list_folders()` function in the `/folder/dir-browser` endpoint is vulnerable to directory traversal attacks. Any authenticated user (including non-admin) c…

    swingmx swingmusic swingmusic PyPI