streama vulnerabilities

CVEs whose affected-version data names the streama package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-73039Medium· 5.4

1mo ago

streama Insecure Direct Object Reference via ViewingStatusController

streama contains an insecure direct object reference vulnerability in ViewingStatusController that allows authenticated users to read and delete other users' viewing status records. Attackers can enumerate all users' watch progress, dele…

▾ Sunlitstreamaserver · streamaEPSS 0.22%via CVEORG