GHSA-m63r-m9jh-3vc6: WWBN AVideo has an Incomplete fix: Directory traversal bypass via query string in ReceiveImage downloadURL parameters

April 14, 2026

This advisory has been withdrawn.

References

github.com/WWBN/AVideo
github.com/WWBN/AVideo/commit/bd11c16ec894698e54e2cdae25026c61ad1ed441
github.com/WWBN/AVideo/security/advisories/GHSA-m63r-m9jh-3vc6
github.com/advisories/GHSA-m63r-m9jh-3vc6

Code Behaviors & Features

Detect and mitigate GHSA-m63r-m9jh-3vc6 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →