iv-org

Products

ProductCVEsExploitedLatest
Invidious2–Jun 30, 2026

Exploited and recent CVEs

  • CVE-2026-58447 Medium 6.5 Invidious - Cross-User Playlist Video Deletion via Missing Ownership Check 0.3%
  • CVE-2026-57946 Low 3.7 Invidious - Private Playlist Disclosure via Unauthenticated RSS Feed Endpoint 0.4%