Components
Vulnerabilities
Pricing
MCP
Docs
Sign up
Login
Find vulnerabilities. Fix fast with AI.
Search components by package, version, or CVE to get started.
Ecosystem
Package
Version
Vulnerabilities
CVE-2025-34441
CVE-2025-34441
AVideo versions prior to 20.1 expose sensitive user information through an unauthenticated public API endpoint. Responses include emails, usernames, administrative status, and last login times, enabling user enumeration and privacy violations.
Published Dec 18, 2025
https://www.vulncheck.com/advisories/avideo-user-information-disclosure-via-public-api
CVSS Score
High
7.5
Components Impacted
Components Impacted
Security Details
Security Details
Sonatype Research
Sonatype Research
Ecosystem
Package
Version
Ecosystem
Package
Version
composer
wwbn/avideo
10.4
composer
wwbn/avideo
10.8
composer
wwbn/avideo
11.1.1
composer
wwbn/avideo
11.1
composer
wwbn/avideo
11.5
composer
wwbn/avideo
11.6
composer
wwbn/avideo
11
composer
wwbn/avideo
12.4
composer
wwbn/avideo
14.3.1
composer
wwbn/avideo
14.3
composer
wwbn/avideo
14.4
composer
wwbn/avideo
18.0
1-12 of 12
CVE-2025-34441 | Components Impacted | Sonatype Guide | Sonatype Guide
