GHSA-gpgp-w4x2-h3h7: WWBN AVideo has an IDOR in Live Restreams list.json.php Exposes Other Users' Stream Keys and OAuth Tokens

April 14, 2026

This advisory has been withdrawn.

References

github.com/WWBN/AVideo
github.com/WWBN/AVideo/commit/d5992fff2811df4adad1d9fc7d0a5837b882aed7
github.com/WWBN/AVideo/security/advisories/GHSA-gpgp-w4x2-h3h7
github.com/advisories/GHSA-gpgp-w4x2-h3h7

Code Behaviors & Features

Detect and mitigate GHSA-gpgp-w4x2-h3h7 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →