Active Debug Code The advisory has been revoked - it doesn't affect any version of package wwbn/avideo (opens in a new tab)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk IDSNYK-PHP-WWBNAVIDEO-16068882
- published15 Apr 2026
- disclosed14 Apr 2026
- creditoffset
Introduced: 14 Apr 2026
CVE NOT AVAILABLE CWE-489 (opens in a new tab)Common Weakness Enumeration (CWE) is a category system for software weaknesses
How to fix?
There is no fixed version for wwbn/avideo.
Amendment
This was deemed not a vulnerability.
Overview
wwbn/avideo is an Audio and Video Platform or simply "A Video Platform".
Affected versions of this package are vulnerable to Active Debug Code via the git.json.php script, which executes a shell command and returns sensitive information as JSON to any unauthenticated user. An attacker can obtain developer email addresses, commit messages, and the exact deployed version by sending unauthenticated requests to the exposed endpoint.