Meelo vulnerabilities

CVEs whose affected-version data names the Meelo package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-122327Medium· 4.3

yesterday

Meelo through 3.13.1 Missing Authorization on Song, Track and Video Endpoints

Meelo through 3.13.1 contains a missing authorization vulnerability that allows authenticated non-admin users to modify shared catalog data because RolesGuard does not require Admin on song, track and video write routes. Attackers can se…

▾ SunlitArthi-chaud · MeeloEPSS 0.21%via CVEORG