VYPR

MyTube

by GitHub

Source repositories

CVEs (2)

  • CVE-2026-33890CriMar 27, 2026
    risk 0.57cvss 9.8epss 0.00

    MyTube is a self-hosted downloader and player for several video websites Prior to version 1.8.71, an unauthenticated attacker can register an arbitrary passkey and subsequently authenticate with it to obtain a full admin session. The application exposes passkey registration…

  • CVE-2026-24140LowJan 24, 2026
    risk 0.00cvss 2.7epss 0.00

    MyTube is a self-hosted downloader and player for several video websites. Versions 1.7.78 and below have a Mass Assignment vulnerability in the settings management functionality due to insufficient input validation. The application's saveSettings() function accepts arbitrary…