Description
Use of insecure hashing algorithm in the Gravatar's service in Navidrome v0.52.3 allows attackers to manipulate a user's account information.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/navidrome/navidrome | <= 0.52.3 | — | GHSA-hrmx-8jjv-g758 |
| Go | github.com/navidrome/navidrome | all versions | — | GO-2024-3029 |