Blackcandy-Org Black Candy
1 CVEs affecting Blackcandy-Org Black Candy. Latest disclosed: 2026-09-24. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-97061 | Medium | 4.3 | 2026-09-24 | Black Candy through 3.2.1 fails to scope playlist search queries to the authenticated session user, allowing any authenticated user to enumerate all playlists… |