navidrome Summary

Latest vulnerabilities published by navidrome

JSON RSS CSV 🔔 Create Alert Trigger

4 February 2026

Cross-Site Scripting Vulnerability in Navidrome Music Server by Navidrome
CVE-2026-25578
NavidromeNavidrome6.1MEDIUM
Memory Growth Vulnerability in Navidrome Music Collection Server
CVE-2026-25579
NavidromeNavidrome9.2CRITICAL

30 May 2025

SQL Injection Vulnerability in Navidrome Music Streaming Server
CVE-2025-48949
NavidromeNavidrome8.9HIGH
Authorization Bypass Vulnerability in Navidrome Music Server
CVE-2025-48948
NavidromeNavidrome7.4HIGH

24 February 2025

Authentication Bypass Vulnerability in Navidrome Music Server
CVE-2025-27112
NavidromeNavidromeEPSS 12%6.9MEDIUM

23 December 2024

Web-Based Music Collection Server Vulnerability in Navidrome
CVE-2024-56362
NavidromeNavidrome7.1HIGH

20 September 2024

Navidrome Vulnerabilities Allow for Information Leakage and SQL Injection
CVE-2024-47062
Navidrome👾🟡EPSS 85%

1 August 2024

Insecure Hashing Algorithm in Navidrome Affects User Account Security
CVE-2024-41259
NavidromeNavidrome

1 May 2024

Navidrome Parameter Tampering Vulnerability Affects Users
CVE-2024-32963
NavidromeNavidrome4.2MEDIUM

21 December 2023

Authentication bypass vulnerability in navidrome's subsonic endpoint
CVE-2023-51442
navidromenavidrome8.6HIGH

24 January 2022

SQL Injection Vulnerability in Navidrome Product
CVE-2022-23857
NavidromeNavidrome6.5MEDIUM