Skip to content

CVE lookup

CVE-2026-63269

Pruva has a verified reproduction for CVE-2026-63269: LFI and GET SSRF via GStreamer and HLS playlists — linked media makes GStreamer read local files and fetch remote URLs on open. The canonical evidence record is REPRO-2026-00378.

REPRO

REPRO-2026-00378

Package

LibreOffice/core · unknown

Severity

MEDIUM

Status

published