Skip to content

Navidrome has XSS via comment from song metadata

Moderate severity GitHub Reviewed Published Feb 3, 2026 in navidrome/navidrome • Updated Feb 5, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts