GO-2025-3734 Navidrome allows SQL Injection via role parameter in github.com/navidrome/navidrome

Navidrome allows SQL Injection via role parameter in github.com/navidrome/navidrome...

GHSA-XWX7-P63R-2RJ8 Navidrome Stores JWT Secret in Plaintext in navidrome.db

Navidrome stores the JWT secret in plaintext in the navidrome.db database file under the property table. This practice introduces a security risk because anyone with access to the database file can retrieve the secret. The JWT secret is critical for the authentication and authorization system. If...

GO-2024-3029 Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome

Navidrome uses MD5 hashing algorithm in github.com/navidrome/navidrome...