VYPR

EmbedVideo

by StarCitizenWiki

CVEs (1)

  • CVE-2026-55690higJun 19, 2026
    risk 0.38cvss epss

    ### Summary When passing an unknown service name to embedvideo, an error message is rendered containing the invalid service name. The service name is not sanitized and can contain HTML. ### Details There is a hardcoded list of allowed services in a switch statement inside…