Security
فارسی
All products

github.com/navidrome/navidrome

Go · Package
11 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Navidrome Parameter Tampering vulnerabilityCVE-2024-32963 · GHSA-4JRX-5W4H-3GPMVersion ranges need review. github.com/navidrome/navidrome Go Medium Fix reported
Authentication bypass vulnerability in navidrome's subsonic endpointCVE-2023-51442 · GHSA-WQ59-4Q6R-635RVersion ranges need review. github.com/navidrome/navidrome Go High Fix reported
Navidrome allows SQL Injection via role parameterCVE-2025-48949 · GHSA-5WGP-VJXM-3X2RVersion ranges need review. github.com/navidrome/navidrome Go High Fix reported
Navidrome Transcoding Permission Bypass Vulnerability ReportCVE-2025-48948 · GHSA-F238-RGGP-82M3Version ranges need review. github.com/navidrome/navidrome Go High Fix reported
Navidrome allows an authentication bypass in Subsonic API with non-existent usernameCVE-2025-27112 · GHSA-C3P4-VM8F-386PVersion ranges need review. github.com/navidrome/navidrome Go Medium Fix reported
Navidrome Stores JWT Secret in Plaintext in navidrome.dbCVE-2024-56362 · GHSA-XWX7-P63R-2RJ8Version ranges need review. github.com/navidrome/navidrome Go High Fix reported
Navidrome has Multiple SQL Injections and ORM LeakCVE-2024-47062 · GHSA-58VJ-CV5W-V4V6Version ranges need review. github.com/navidrome/navidrome Go Critical Fix reported
Navidrome uses MD5 hashing algorithmCVE-2024-41259 · GHSA-HRMX-8JJV-G758Version ranges need review. github.com/navidrome/navidrome Go Medium No fix reported
SQL injection in github.com/navidrome/navidromeCVE-2022-23857 · GHSA-PMCR-2RHP-36HRVersion ranges need review. github.com/navidrome/navidrome Go Medium Fix reported
Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpointsCVE-2026-25579 · GHSA-HRR4-3WGR-68X3Version ranges need review. github.com/navidrome/navidrome Go Critical Fix reported
Navidrome has XSS via comment from song metadataCVE-2026-25578 · GHSA-RH3R-8PXM-HG4WVersion ranges need review. github.com/navidrome/navidrome Go Medium Fix reported