danmu_api vulnerabilities

CVEs whose affected-version data names the danmu_api package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-116485Critical· 9.8

today

danmu_api before 1.21.7 Authentication Bypass via Default Token in Env Endpoints

danmu_api before 1.21.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to modify server environment configuration when the default TOKEN is used and ADMIN_TOKEN is unset. Attackers can send POST req…

▾ Midnighthuangxd- · danmu_apivia CVEORG