librephotos vulnerabilities

CVEs whose affected-version data names the librephotos package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-57943Medium· 5.9PoC

4mo ago

LibrePhotos < 1.0.0 - Insecure Direct Object Reference in SetPhotosShared Endpoint

LibrePhotos before 1.0.0 contains a broken object level authorization vulnerability in the SetPhotosShared endpoint that allows authenticated users to grant themselves access to other users' private photos by bypassing ownership validati…

▾ TwilightLibrePhotos · librephotosEPSS 0.34%via CVEORG