CVE-2026-63434

In MyTube versions prior to 1.10.6 , a visitor-role user can exploit an improper input validation vulnerability in the statistics ingest endpoint (handled by ingestEvents in backend/src/controllers/statisticsController.ts). When statisticsEnabled and statisticsTrackVisitorActivity are active, the...