iv-org has 2 CVEs on record. The median CVSS is 5.1 (medium).
CVEs per month
Last 12 months, by publish date
1225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/101126/11
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 5.1
- Publish → KEV
- —
- Last 90 days
- 0 prev 2
2
Total CVEs
0
Critical
0
CISA KEV
0
Exploited
iv-org vulnerabilities
CVEs affecting iv-org, newest first. Open any entry for full detail, references, and exploit status.
2 CVEsRSS
CVE-2026-58447Medium· 6.5PoCInvidious - Cross-User Playlist Video Deletion via Missing Ownership Check
Invidious through 2.20260626.0, fixed in commit 77ad416, contains a broken object level authorization vulnerability that allows authenticated attackers to delete videos from other users' playlists by supplying an arbitrary global video i…
▾ Twilightiv-org · InvidiousEPSS 0.27%via CVEORG
CVE-2026-57946Low· 3.7PoCInvidious - Private Playlist Disclosure via Unauthenticated RSS Feed Endpoint
Invidious before version 2.20260626.0 contains a broken access control vulnerability that allows unauthenticated attackers to retrieve private playlist contents by accessing the RSS feed playlist endpoint without authentication. Attacker…
▾ Twilightiv-org · InvidiousEPSS 0.35%via CVEORG