Go to main page
Versions in this module
v0
Sep 23, 2026 GO-2024-3029
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
Sep 21, 2026 GO-2024-3029
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
Sep 12, 2026 GO-2024-3029
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
Jul 11, 2026 GO-2024-3029
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
Jul 9, 2026 GO-2024-3029
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
Jul 7, 2026 GO-2024-3029
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
Jun 8, 2026 GO-2024-3029
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
Apr 12, 2026 GO-2024-3029
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
Apr 4, 2026 GO-2024-3029
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
Mar 31, 2026 GO-2024-3029
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
Feb 10, 2026 GO-2024-3029
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
Feb 7, 2026 GO-2024-3029
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
Feb 3, 2026 GO-2024-3029
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
Dec 6, 2025 GO-2024-3029 +2 more
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
GO-2026-4411: Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints in github.com/navidrome/navidrome
GO-2026-4413: Navidrome has XSS via comment from song metadata in github.com/navidrome/navidrome
Nov 9, 2025 GO-2024-3029 +2 more
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
GO-2026-4411: Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints in github.com/navidrome/navidrome
GO-2026-4413: Navidrome has XSS via comment from song metadata in github.com/navidrome/navidrome
Jul 28, 2025 GO-2024-3029 +2 more
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
GO-2026-4411: Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints in github.com/navidrome/navidrome
GO-2026-4413: Navidrome has XSS via comment from song metadata in github.com/navidrome/navidrome
Jul 1, 2025 GO-2024-3029 +2 more
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
GO-2026-4411: Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints in github.com/navidrome/navidrome
GO-2026-4413: Navidrome has XSS via comment from song metadata in github.com/navidrome/navidrome
May 29, 2025 GO-2024-3029 +2 more
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
GO-2026-4411: Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints in github.com/navidrome/navidrome
GO-2026-4413: Navidrome has XSS via comment from song metadata in github.com/navidrome/navidrome
May 28, 2025 GO-2024-3029 +2 more
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
GO-2026-4411: Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints in github.com/navidrome/navidrome
GO-2026-4413: Navidrome has XSS via comment from song metadata in github.com/navidrome/navidrome
Apr 5, 2025 GO-2024-3029 +4 more
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
GO-2025-3733: Navidrome Transcoding Permission Bypass Vulnerability Report in github.com/navidrome/navidrome
GO-2025-3734: Navidrome allows SQL Injection via role parameter in github.com/navidrome/navidrome
GO-2026-4411: Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints in github.com/navidrome/navidrome
GO-2026-4413: Navidrome has XSS via comment from song metadata in github.com/navidrome/navidrome
Mar 15, 2025 GO-2024-3029 +4 more
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
GO-2025-3733: Navidrome Transcoding Permission Bypass Vulnerability Report in github.com/navidrome/navidrome
GO-2025-3734: Navidrome allows SQL Injection via role parameter in github.com/navidrome/navidrome
GO-2026-4411: Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints in github.com/navidrome/navidrome
GO-2026-4413: Navidrome has XSS via comment from song metadata in github.com/navidrome/navidrome
Mar 9, 2025 GO-2024-3029 +4 more
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
GO-2025-3733: Navidrome Transcoding Permission Bypass Vulnerability Report in github.com/navidrome/navidrome
GO-2025-3734: Navidrome allows SQL Injection via role parameter in github.com/navidrome/navidrome
GO-2026-4411: Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints in github.com/navidrome/navidrome
GO-2026-4413: Navidrome has XSS via comment from song metadata in github.com/navidrome/navidrome
Feb 21, 2025 GO-2024-3029 +3 more
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
GO-2025-3733: Navidrome Transcoding Permission Bypass Vulnerability Report in github.com/navidrome/navidrome
GO-2026-4411: Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints in github.com/navidrome/navidrome
GO-2026-4413: Navidrome has XSS via comment from song metadata in github.com/navidrome/navidrome
Jan 13, 2025 GO-2024-3029 +4 more
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
GO-2025-3484: Navidrome allows an authentication bypass in Subsonic API with non-existent username in github.com/navidrome/navidrome
GO-2025-3733: Navidrome Transcoding Permission Bypass Vulnerability Report in github.com/navidrome/navidrome
GO-2026-4411: Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints in github.com/navidrome/navidrome
GO-2026-4413: Navidrome has XSS via comment from song metadata in github.com/navidrome/navidrome
Dec 29, 2024 GO-2024-3029 +4 more
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
GO-2025-3484: Navidrome allows an authentication bypass in Subsonic API with non-existent username in github.com/navidrome/navidrome
GO-2025-3733: Navidrome Transcoding Permission Bypass Vulnerability Report in github.com/navidrome/navidrome
GO-2026-4411: Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints in github.com/navidrome/navidrome
GO-2026-4413: Navidrome has XSS via comment from song metadata in github.com/navidrome/navidrome
Dec 21, 2024 GO-2024-3029 +4 more
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
GO-2025-3484: Navidrome allows an authentication bypass in Subsonic API with non-existent username in github.com/navidrome/navidrome
GO-2025-3733: Navidrome Transcoding Permission Bypass Vulnerability Report in github.com/navidrome/navidrome
GO-2026-4411: Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints in github.com/navidrome/navidrome
GO-2026-4413: Navidrome has XSS via comment from song metadata in github.com/navidrome/navidrome
Dec 21, 2024 GO-2024-3029 +4 more
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
GO-2025-3484: Navidrome allows an authentication bypass in Subsonic API with non-existent username in github.com/navidrome/navidrome
GO-2025-3733: Navidrome Transcoding Permission Bypass Vulnerability Report in github.com/navidrome/navidrome
GO-2026-4411: Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints in github.com/navidrome/navidrome
GO-2026-4413: Navidrome has XSS via comment from song metadata in github.com/navidrome/navidrome
Dec 20, 2024 GO-2024-3029 +5 more
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
GO-2024-3357: Navidrome Stores JWT Secret in Plaintext in navidrome.db in github.com/navidrome/navidrome
GO-2025-3484: Navidrome allows an authentication bypass in Subsonic API with non-existent username in github.com/navidrome/navidrome
GO-2025-3733: Navidrome Transcoding Permission Bypass Vulnerability Report in github.com/navidrome/navidrome
GO-2026-4411: Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints in github.com/navidrome/navidrome
GO-2026-4413: Navidrome has XSS via comment from song metadata in github.com/navidrome/navidrome
Sep 27, 2024 GO-2024-3029 +5 more
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
GO-2024-3357: Navidrome Stores JWT Secret in Plaintext in navidrome.db in github.com/navidrome/navidrome
GO-2025-3484: Navidrome allows an authentication bypass in Subsonic API with non-existent username in github.com/navidrome/navidrome
GO-2025-3733: Navidrome Transcoding Permission Bypass Vulnerability Report in github.com/navidrome/navidrome
GO-2026-4411: Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints in github.com/navidrome/navidrome
GO-2026-4413: Navidrome has XSS via comment from song metadata in github.com/navidrome/navidrome
Sep 21, 2024 GO-2024-3029 +5 more
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
GO-2024-3357: Navidrome Stores JWT Secret in Plaintext in navidrome.db in github.com/navidrome/navidrome
GO-2025-3484: Navidrome allows an authentication bypass in Subsonic API with non-existent username in github.com/navidrome/navidrome
GO-2025-3733: Navidrome Transcoding Permission Bypass Vulnerability Report in github.com/navidrome/navidrome
GO-2026-4411: Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints in github.com/navidrome/navidrome
GO-2026-4413: Navidrome has XSS via comment from song metadata in github.com/navidrome/navidrome
Sep 17, 2024 GO-2024-3029 +5 more
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
GO-2024-3357: Navidrome Stores JWT Secret in Plaintext in navidrome.db in github.com/navidrome/navidrome
GO-2025-3484: Navidrome allows an authentication bypass in Subsonic API with non-existent username in github.com/navidrome/navidrome
GO-2025-3733: Navidrome Transcoding Permission Bypass Vulnerability Report in github.com/navidrome/navidrome
GO-2026-4411: Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints in github.com/navidrome/navidrome
GO-2026-4413: Navidrome has XSS via comment from song metadata in github.com/navidrome/navidrome
Sep 17, 2024 GO-2024-3029 +5 more
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
GO-2024-3357: Navidrome Stores JWT Secret in Plaintext in navidrome.db in github.com/navidrome/navidrome
GO-2025-3484: Navidrome allows an authentication bypass in Subsonic API with non-existent username in github.com/navidrome/navidrome
GO-2025-3733: Navidrome Transcoding Permission Bypass Vulnerability Report in github.com/navidrome/navidrome
GO-2026-4411: Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints in github.com/navidrome/navidrome
GO-2026-4413: Navidrome has XSS via comment from song metadata in github.com/navidrome/navidrome
May 12, 2024 GO-2024-3029 +6 more
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
GO-2024-3153: Navidrome has Multiple SQL Injections and ORM Leak in github.com/navidrome/navidrome
GO-2024-3357: Navidrome Stores JWT Secret in Plaintext in navidrome.db in github.com/navidrome/navidrome
GO-2025-3484: Navidrome allows an authentication bypass in Subsonic API with non-existent username in github.com/navidrome/navidrome
GO-2025-3733: Navidrome Transcoding Permission Bypass Vulnerability Report in github.com/navidrome/navidrome
GO-2026-4411: Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints in github.com/navidrome/navidrome
GO-2026-4413: Navidrome has XSS via comment from song metadata in github.com/navidrome/navidrome
Apr 27, 2024 GO-2024-3029 +6 more
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
GO-2024-3153: Navidrome has Multiple SQL Injections and ORM Leak in github.com/navidrome/navidrome
GO-2024-3357: Navidrome Stores JWT Secret in Plaintext in navidrome.db in github.com/navidrome/navidrome
GO-2025-3484: Navidrome allows an authentication bypass in Subsonic API with non-existent username in github.com/navidrome/navidrome
GO-2025-3733: Navidrome Transcoding Permission Bypass Vulnerability Report in github.com/navidrome/navidrome
GO-2026-4411: Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints in github.com/navidrome/navidrome
GO-2026-4413: Navidrome has XSS via comment from song metadata in github.com/navidrome/navidrome
Feb 16, 2024 GO-2024-2803 +6 more
GO-2024-2803: Navidrome Parameter Tampering vulnerability in github.com/navidrome/navidrome
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
GO-2024-3153: Navidrome has Multiple SQL Injections and ORM Leak in github.com/navidrome/navidrome
GO-2024-3357: Navidrome Stores JWT Secret in Plaintext in navidrome.db in github.com/navidrome/navidrome
GO-2025-3733: Navidrome Transcoding Permission Bypass Vulnerability Report in github.com/navidrome/navidrome
GO-2026-4411: Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints in github.com/navidrome/navidrome
GO-2026-4413: Navidrome has XSS via comment from song metadata in github.com/navidrome/navidrome
Jan 21, 2024 GO-2024-2803 +6 more
GO-2024-2803: Navidrome Parameter Tampering vulnerability in github.com/navidrome/navidrome
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
GO-2024-3153: Navidrome has Multiple SQL Injections and ORM Leak in github.com/navidrome/navidrome
GO-2024-3357: Navidrome Stores JWT Secret in Plaintext in navidrome.db in github.com/navidrome/navidrome
GO-2025-3733: Navidrome Transcoding Permission Bypass Vulnerability Report in github.com/navidrome/navidrome
GO-2026-4411: Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints in github.com/navidrome/navidrome
GO-2026-4413: Navidrome has XSS via comment from song metadata in github.com/navidrome/navidrome
Dec 14, 2023 GO-2024-2803 +6 more
GO-2024-2803: Navidrome Parameter Tampering vulnerability in github.com/navidrome/navidrome
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
GO-2024-3153: Navidrome has Multiple SQL Injections and ORM Leak in github.com/navidrome/navidrome
GO-2024-3357: Navidrome Stores JWT Secret in Plaintext in navidrome.db in github.com/navidrome/navidrome
GO-2025-3733: Navidrome Transcoding Permission Bypass Vulnerability Report in github.com/navidrome/navidrome
GO-2026-4411: Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints in github.com/navidrome/navidrome
GO-2026-4413: Navidrome has XSS via comment from song metadata in github.com/navidrome/navidrome
Nov 22, 2023 GO-2023-2414 +7 more
GO-2023-2414: Authentication bypass vulnerability in navidrome's subsonic endpoint in github.com/navidrome/navidrome
GO-2024-2803: Navidrome Parameter Tampering vulnerability in github.com/navidrome/navidrome
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
GO-2024-3153: Navidrome has Multiple SQL Injections and ORM Leak in github.com/navidrome/navidrome
GO-2024-3357: Navidrome Stores JWT Secret in Plaintext in navidrome.db in github.com/navidrome/navidrome
GO-2025-3733: Navidrome Transcoding Permission Bypass Vulnerability Report in github.com/navidrome/navidrome
GO-2026-4411: Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints in github.com/navidrome/navidrome
GO-2026-4413: Navidrome has XSS via comment from song metadata in github.com/navidrome/navidrome
Nov 17, 2023 GO-2023-2414 +7 more
GO-2023-2414: Authentication bypass vulnerability in navidrome's subsonic endpoint in github.com/navidrome/navidrome
GO-2024-2803: Navidrome Parameter Tampering vulnerability in github.com/navidrome/navidrome
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
GO-2024-3153: Navidrome has Multiple SQL Injections and ORM Leak in github.com/navidrome/navidrome
GO-2024-3357: Navidrome Stores JWT Secret in Plaintext in navidrome.db in github.com/navidrome/navidrome
GO-2025-3733: Navidrome Transcoding Permission Bypass Vulnerability Report in github.com/navidrome/navidrome
GO-2026-4411: Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints in github.com/navidrome/navidrome
GO-2026-4413: Navidrome has XSS via comment from song metadata in github.com/navidrome/navidrome
Feb 14, 2023 GO-2023-2414 +7 more
GO-2023-2414: Authentication bypass vulnerability in navidrome's subsonic endpoint in github.com/navidrome/navidrome
GO-2024-2803: Navidrome Parameter Tampering vulnerability in github.com/navidrome/navidrome
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
GO-2024-3153: Navidrome has Multiple SQL Injections and ORM Leak in github.com/navidrome/navidrome
GO-2024-3357: Navidrome Stores JWT Secret in Plaintext in navidrome.db in github.com/navidrome/navidrome
GO-2025-3733: Navidrome Transcoding Permission Bypass Vulnerability Report in github.com/navidrome/navidrome
GO-2026-4411: Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints in github.com/navidrome/navidrome
GO-2026-4413: Navidrome has XSS via comment from song metadata in github.com/navidrome/navidrome
Feb 12, 2023 GO-2023-2414 +7 more
GO-2023-2414: Authentication bypass vulnerability in navidrome's subsonic endpoint in github.com/navidrome/navidrome
GO-2024-2803: Navidrome Parameter Tampering vulnerability in github.com/navidrome/navidrome
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
GO-2024-3153: Navidrome has Multiple SQL Injections and ORM Leak in github.com/navidrome/navidrome
GO-2024-3357: Navidrome Stores JWT Secret in Plaintext in navidrome.db in github.com/navidrome/navidrome
GO-2025-3733: Navidrome Transcoding Permission Bypass Vulnerability Report in github.com/navidrome/navidrome
GO-2026-4411: Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints in github.com/navidrome/navidrome
GO-2026-4413: Navidrome has XSS via comment from song metadata in github.com/navidrome/navidrome
Feb 4, 2023 GO-2023-2414 +7 more
GO-2023-2414: Authentication bypass vulnerability in navidrome's subsonic endpoint in github.com/navidrome/navidrome
GO-2024-2803: Navidrome Parameter Tampering vulnerability in github.com/navidrome/navidrome
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
GO-2024-3153: Navidrome has Multiple SQL Injections and ORM Leak in github.com/navidrome/navidrome
GO-2024-3357: Navidrome Stores JWT Secret in Plaintext in navidrome.db in github.com/navidrome/navidrome
GO-2025-3733: Navidrome Transcoding Permission Bypass Vulnerability Report in github.com/navidrome/navidrome
GO-2026-4411: Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints in github.com/navidrome/navidrome
GO-2026-4413: Navidrome has XSS via comment from song metadata in github.com/navidrome/navidrome
Jan 30, 2023 GO-2023-2414 +7 more
GO-2023-2414: Authentication bypass vulnerability in navidrome's subsonic endpoint in github.com/navidrome/navidrome
GO-2024-2803: Navidrome Parameter Tampering vulnerability in github.com/navidrome/navidrome
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
GO-2024-3153: Navidrome has Multiple SQL Injections and ORM Leak in github.com/navidrome/navidrome
GO-2024-3357: Navidrome Stores JWT Secret in Plaintext in navidrome.db in github.com/navidrome/navidrome
GO-2025-3733: Navidrome Transcoding Permission Bypass Vulnerability Report in github.com/navidrome/navidrome
GO-2026-4411: Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints in github.com/navidrome/navidrome
GO-2026-4413: Navidrome has XSS via comment from song metadata in github.com/navidrome/navidrome
Oct 11, 2022 GO-2023-2414 +7 more
GO-2023-2414: Authentication bypass vulnerability in navidrome's subsonic endpoint in github.com/navidrome/navidrome
GO-2024-2803: Navidrome Parameter Tampering vulnerability in github.com/navidrome/navidrome
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
GO-2024-3153: Navidrome has Multiple SQL Injections and ORM Leak in github.com/navidrome/navidrome
GO-2024-3357: Navidrome Stores JWT Secret in Plaintext in navidrome.db in github.com/navidrome/navidrome
GO-2025-3733: Navidrome Transcoding Permission Bypass Vulnerability Report in github.com/navidrome/navidrome
GO-2026-4411: Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints in github.com/navidrome/navidrome
GO-2026-4413: Navidrome has XSS via comment from song metadata in github.com/navidrome/navidrome
Jan 22, 2022 GO-2023-2414 +7 more
GO-2023-2414: Authentication bypass vulnerability in navidrome's subsonic endpoint in github.com/navidrome/navidrome
GO-2024-2803: Navidrome Parameter Tampering vulnerability in github.com/navidrome/navidrome
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
GO-2024-3153: Navidrome has Multiple SQL Injections and ORM Leak in github.com/navidrome/navidrome
GO-2024-3357: Navidrome Stores JWT Secret in Plaintext in navidrome.db in github.com/navidrome/navidrome
GO-2025-3733: Navidrome Transcoding Permission Bypass Vulnerability Report in github.com/navidrome/navidrome
GO-2026-4411: Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints in github.com/navidrome/navidrome
GO-2026-4413: Navidrome has XSS via comment from song metadata in github.com/navidrome/navidrome
Nov 18, 2021 GO-2022-0302 +8 more
GO-2022-0302: SQL injection in github.com/navidrome/navidrome
GO-2023-2414: Authentication bypass vulnerability in navidrome's subsonic endpoint in github.com/navidrome/navidrome
GO-2024-2803: Navidrome Parameter Tampering vulnerability in github.com/navidrome/navidrome
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
GO-2024-3153: Navidrome has Multiple SQL Injections and ORM Leak in github.com/navidrome/navidrome
GO-2024-3357: Navidrome Stores JWT Secret in Plaintext in navidrome.db in github.com/navidrome/navidrome
GO-2025-3733: Navidrome Transcoding Permission Bypass Vulnerability Report in github.com/navidrome/navidrome
GO-2026-4411: Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints in github.com/navidrome/navidrome
GO-2026-4413: Navidrome has XSS via comment from song metadata in github.com/navidrome/navidrome
Oct 6, 2021 GO-2022-0302 +8 more
GO-2022-0302: SQL injection in github.com/navidrome/navidrome
GO-2023-2414: Authentication bypass vulnerability in navidrome's subsonic endpoint in github.com/navidrome/navidrome
GO-2024-2803: Navidrome Parameter Tampering vulnerability in github.com/navidrome/navidrome
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
GO-2024-3153: Navidrome has Multiple SQL Injections and ORM Leak in github.com/navidrome/navidrome
GO-2024-3357: Navidrome Stores JWT Secret in Plaintext in navidrome.db in github.com/navidrome/navidrome
GO-2025-3733: Navidrome Transcoding Permission Bypass Vulnerability Report in github.com/navidrome/navidrome
GO-2026-4411: Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints in github.com/navidrome/navidrome
GO-2026-4413: Navidrome has XSS via comment from song metadata in github.com/navidrome/navidrome
Aug 24, 2021 GO-2022-0302 +8 more
GO-2022-0302: SQL injection in github.com/navidrome/navidrome
GO-2023-2414: Authentication bypass vulnerability in navidrome's subsonic endpoint in github.com/navidrome/navidrome
GO-2024-2803: Navidrome Parameter Tampering vulnerability in github.com/navidrome/navidrome
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
GO-2024-3153: Navidrome has Multiple SQL Injections and ORM Leak in github.com/navidrome/navidrome
GO-2024-3357: Navidrome Stores JWT Secret in Plaintext in navidrome.db in github.com/navidrome/navidrome
GO-2025-3733: Navidrome Transcoding Permission Bypass Vulnerability Report in github.com/navidrome/navidrome
GO-2026-4411: Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints in github.com/navidrome/navidrome
GO-2026-4413: Navidrome has XSS via comment from song metadata in github.com/navidrome/navidrome
Aug 19, 2021 GO-2022-0302 +8 more
GO-2022-0302: SQL injection in github.com/navidrome/navidrome
GO-2023-2414: Authentication bypass vulnerability in navidrome's subsonic endpoint in github.com/navidrome/navidrome
GO-2024-2803: Navidrome Parameter Tampering vulnerability in github.com/navidrome/navidrome
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
GO-2024-3153: Navidrome has Multiple SQL Injections and ORM Leak in github.com/navidrome/navidrome
GO-2024-3357: Navidrome Stores JWT Secret in Plaintext in navidrome.db in github.com/navidrome/navidrome
GO-2025-3733: Navidrome Transcoding Permission Bypass Vulnerability Report in github.com/navidrome/navidrome
GO-2026-4411: Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints in github.com/navidrome/navidrome
GO-2026-4413: Navidrome has XSS via comment from song metadata in github.com/navidrome/navidrome
Jul 1, 2021 GO-2022-0302 +8 more
GO-2022-0302: SQL injection in github.com/navidrome/navidrome
GO-2023-2414: Authentication bypass vulnerability in navidrome's subsonic endpoint in github.com/navidrome/navidrome
GO-2024-2803: Navidrome Parameter Tampering vulnerability in github.com/navidrome/navidrome
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
GO-2024-3153: Navidrome has Multiple SQL Injections and ORM Leak in github.com/navidrome/navidrome
GO-2024-3357: Navidrome Stores JWT Secret in Plaintext in navidrome.db in github.com/navidrome/navidrome
GO-2025-3733: Navidrome Transcoding Permission Bypass Vulnerability Report in github.com/navidrome/navidrome
GO-2026-4411: Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints in github.com/navidrome/navidrome
GO-2026-4413: Navidrome has XSS via comment from song metadata in github.com/navidrome/navidrome
Jun 28, 2021 GO-2022-0302 +8 more
GO-2022-0302: SQL injection in github.com/navidrome/navidrome
GO-2023-2414: Authentication bypass vulnerability in navidrome's subsonic endpoint in github.com/navidrome/navidrome
GO-2024-2803: Navidrome Parameter Tampering vulnerability in github.com/navidrome/navidrome
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
GO-2024-3153: Navidrome has Multiple SQL Injections and ORM Leak in github.com/navidrome/navidrome
GO-2024-3357: Navidrome Stores JWT Secret in Plaintext in navidrome.db in github.com/navidrome/navidrome
GO-2025-3733: Navidrome Transcoding Permission Bypass Vulnerability Report in github.com/navidrome/navidrome
GO-2026-4411: Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints in github.com/navidrome/navidrome
GO-2026-4413: Navidrome has XSS via comment from song metadata in github.com/navidrome/navidrome
May 24, 2021 GO-2022-0302 +8 more
GO-2022-0302: SQL injection in github.com/navidrome/navidrome
GO-2023-2414: Authentication bypass vulnerability in navidrome's subsonic endpoint in github.com/navidrome/navidrome
GO-2024-2803: Navidrome Parameter Tampering vulnerability in github.com/navidrome/navidrome
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
GO-2024-3153: Navidrome has Multiple SQL Injections and ORM Leak in github.com/navidrome/navidrome
GO-2024-3357: Navidrome Stores JWT Secret in Plaintext in navidrome.db in github.com/navidrome/navidrome
GO-2025-3733: Navidrome Transcoding Permission Bypass Vulnerability Report in github.com/navidrome/navidrome
GO-2026-4411: Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints in github.com/navidrome/navidrome
GO-2026-4413: Navidrome has XSS via comment from song metadata in github.com/navidrome/navidrome
May 5, 2021 GO-2022-0302 +8 more
GO-2022-0302: SQL injection in github.com/navidrome/navidrome
GO-2023-2414: Authentication bypass vulnerability in navidrome's subsonic endpoint in github.com/navidrome/navidrome
GO-2024-2803: Navidrome Parameter Tampering vulnerability in github.com/navidrome/navidrome
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
GO-2024-3153: Navidrome has Multiple SQL Injections and ORM Leak in github.com/navidrome/navidrome
GO-2024-3357: Navidrome Stores JWT Secret in Plaintext in navidrome.db in github.com/navidrome/navidrome
GO-2025-3733: Navidrome Transcoding Permission Bypass Vulnerability Report in github.com/navidrome/navidrome
GO-2026-4411: Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints in github.com/navidrome/navidrome
GO-2026-4413: Navidrome has XSS via comment from song metadata in github.com/navidrome/navidrome
Apr 26, 2021 GO-2022-0302 +8 more
GO-2022-0302: SQL injection in github.com/navidrome/navidrome
GO-2023-2414: Authentication bypass vulnerability in navidrome's subsonic endpoint in github.com/navidrome/navidrome
GO-2024-2803: Navidrome Parameter Tampering vulnerability in github.com/navidrome/navidrome
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
GO-2024-3153: Navidrome has Multiple SQL Injections and ORM Leak in github.com/navidrome/navidrome
GO-2024-3357: Navidrome Stores JWT Secret in Plaintext in navidrome.db in github.com/navidrome/navidrome
GO-2025-3733: Navidrome Transcoding Permission Bypass Vulnerability Report in github.com/navidrome/navidrome
GO-2026-4411: Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints in github.com/navidrome/navidrome
GO-2026-4413: Navidrome has XSS via comment from song metadata in github.com/navidrome/navidrome
Apr 13, 2021 GO-2022-0302 +8 more
GO-2022-0302: SQL injection in github.com/navidrome/navidrome
GO-2023-2414: Authentication bypass vulnerability in navidrome's subsonic endpoint in github.com/navidrome/navidrome
GO-2024-2803: Navidrome Parameter Tampering vulnerability in github.com/navidrome/navidrome
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
GO-2024-3153: Navidrome has Multiple SQL Injections and ORM Leak in github.com/navidrome/navidrome
GO-2024-3357: Navidrome Stores JWT Secret in Plaintext in navidrome.db in github.com/navidrome/navidrome
GO-2025-3733: Navidrome Transcoding Permission Bypass Vulnerability Report in github.com/navidrome/navidrome
GO-2026-4411: Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints in github.com/navidrome/navidrome
GO-2026-4413: Navidrome has XSS via comment from song metadata in github.com/navidrome/navidrome
Mar 24, 2021 GO-2022-0302 +8 more
GO-2022-0302: SQL injection in github.com/navidrome/navidrome
GO-2023-2414: Authentication bypass vulnerability in navidrome's subsonic endpoint in github.com/navidrome/navidrome
GO-2024-2803: Navidrome Parameter Tampering vulnerability in github.com/navidrome/navidrome
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
GO-2024-3153: Navidrome has Multiple SQL Injections and ORM Leak in github.com/navidrome/navidrome
GO-2024-3357: Navidrome Stores JWT Secret in Plaintext in navidrome.db in github.com/navidrome/navidrome
GO-2025-3733: Navidrome Transcoding Permission Bypass Vulnerability Report in github.com/navidrome/navidrome
GO-2026-4411: Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints in github.com/navidrome/navidrome
GO-2026-4413: Navidrome has XSS via comment from song metadata in github.com/navidrome/navidrome
Feb 7, 2021 GO-2022-0302 +8 more
GO-2022-0302: SQL injection in github.com/navidrome/navidrome
GO-2023-2414: Authentication bypass vulnerability in navidrome's subsonic endpoint in github.com/navidrome/navidrome
GO-2024-2803: Navidrome Parameter Tampering vulnerability in github.com/navidrome/navidrome
GO-2024-3029: Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome
GO-2024-3153: Navidrome has Multiple SQL Injections and ORM Leak in github.com/navidrome/navidrome
GO-2024-3357: Navidrome Stores JWT Secret in Plaintext in navidrome.db in github.com/navidrome/navidrome
GO-2025-3733: Navidrome Transcoding Permission Bypass Vulnerability Report in github.com/navidrome/navidrome
GO-2026-4411: Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints in github.com/navidrome/navidrome
GO-2026-4413: Navidrome has XSS via comment from song metadata in github.com/navidrome/navidrome