critical9.1
CVE-2024-41259
Navidrome uses MD5 hashing algorithm
Impact
Use of insecure hashing algorithm in the Gravatar's service in Navidrome v0.52.3 allows attackers to manipulate a user's account information.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| go | github.com/navidrome/navidrome | <= 0.52.3 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Navidrome | Navidrome | through 0.52.3 |