TI-2026-51248 CVE-2026-73039 · GHSA-pr4j-5x2h-5vr8
streama Insecure Direct Object Reference via ViewingStatusController
Priority LOW 24
streama contains an insecure direct object reference vulnerability in ViewingStatusController that allows authenticated users to read and delete other users' viewing status records.