Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints
Critical severity
GitHub Reviewed
Published
Feb 3, 2026
in
navidrome/navidrome
•
Updated Feb 5, 2026
Give feedback on Dependabot alerts