VYPR

Radio

by Koel

CVEs (1)

  • CVE-2026-54491higJul 15, 2026
    risk 0.45cvss epss

    ### Summary The fix for **CVE-2026-47260** (v9.3.5) added an **initial** `isSafeUrl()` check to several fetchers (`synchronizeEpisodes`, `getStreamableUrl`, `AddRadioStation`, `EpisodePlayable`), but the **redirect-target validation** — the per-hop Guzzle `on_redirect`…