CVE-2026-112076Published
alexta69 MeTube Feed-metadata Thumbnail Fetch ytdl.py DownloadQueue.__write_feed_metadata_sync server-side request forgery
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-112076 · Microsoft / collected KEV context
cve-program · CVE-2026-112076
- https://vuldb.com/vuln/421755
- https://vuldb.com/vuln/421755/cti
- https://vuldb.com/cve/CVE-2026-112076
- https://vuldb.com/submit/1009577
- https://github.com/alexta69/metube/security/advisories/GHSA-hq22-f7w6-p8cr
- https://github.com/alexta69/metube/commit/a3896604540223ecbb8258b41b1d745d62647d16
- https://github.com/alexta69/metube/releases/tag/2026.09.29
- https://github.com/alexta69/metube/
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.