Servers and applications
GHSA-233c-vfmw-6rw9
Missing authorization on live_transmitions_history_id in Live restream endpoints leaks other users' stream keys and HLS URLs (incomplete fix of GHSA-7jf4-mmqm-7p7x)
- Severity
- High 8.1
- Published
- 9 Nov 2026
- Last changed
- 9 Nov 2026
- Added to UpHeron
- 9 Nov 2026
- Sources
- Project advisories (GitHub)
Affected software
| Software | Affected versions |
|---|---|
AVideoServers and applications · github:wwbn/avideo |
|
References
- GitHub Advisory Database https://github.com/advisories/GHSA-233c-vfmw-6rw9
- github.com https://github.com/WWBN/AVideo/security/advisories/GHSA-233c-vfmw-6rw9