pkg:Packagist/azuracast/azuracast

All known vulnerabilities

• CRITICAL9.8CVE-2023-2531AzuraCast missing brute force prevention
  from 0, < 0.18.3
• HIGH8.8CVE-2026-42605AzuraCast has Path Traversal in `currentDirectory` Parameter that Enables Remote Code Execution via Media Upload
  from 0, < 0.23.6
• HIGH8.1CVE-2026-42606AzuraCast has Password Reset Poisoning via Untrusted X-Forwarded-Host Header that Leads to Account Takeover and 2FA Bypass
  from 0, < 0.23.6
• LOW3.5AzuraCast/AzuraCast vulnerable to cross-site scripting
  from 0, < 0.18.0
• LOW3.1AzuraCast Vulnerable to Pre-Auth File Deletion & Admin RCE
  from 0, < 0.23.2