Skip to content

Navidrome allows an authentication bypass in Subsonic API with non-existent username

Moderate severity GitHub Reviewed Published Feb 22, 2025 in navidrome/navidrome • Updated Feb 25, 2025

No open alerts for this advisory

Give feedback on Dependabot alerts