CVE-2026-116485Published
danmu_api before 1.21.7 Authentication Bypass via Default Token in Env Endpoints
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-116485 · Microsoft / collected KEV context
cve-program · CVE-2026-116485
- https://github.com/huangxd-/danmu_api/issues/531
- https://github.com/huangxd-/danmu_api/commit/6e93478064a0ce4e7ed3bc2eae88adaad1b7ab02
- https://github.com/huangxd-/danmu_api/blob/5ef63a01bae7c4bad4dcd7bafbbcdcf33aa82564/danmu_api/worker.js#L223-L244
- https://github.com/huangxd-/danmu_api
- https://www.vulncheck.com/advisories/danmu-api-before-1.21.7-authentication-bypass-via-default-token-in-env-endpoints
Related operational evidence
Explicit CVE identifiers- danmu_api before 1.21.7 Authentication Bypass via Default Token in Env Endpoints · Newly collected advisory · 26 Oct 2026