Lucene search
+L

1 matches found

OSV
OSV
added 2026/02/04 12:14 a.m.9 views

GHSA-HRR4-3WGR-68X3 Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints

Summary Authenticated users can crash the Navidrome server by supplying an excessively large size parameter to /rest/getCoverArt or to a shared-image URL /share/img/. When processing such requests, the server attempts to create an extremely large resized image, causing uncontrolled memory growth...

9.2CVSS5.5AI score0.00455EPSS
SaveExploits1References4
Rows per page
Query Builder