[HIGH] AzuraCast: RCE via Liquidsoap string interpolation injection in station metadata and playlist URLs

PKSA-p9gy-8v98-hsfy GHSA-93fx-5qgc-wr38

Affected version: <=0.23.3

Reported by:
GitHub

[LOW] AzuraCast Vulnerable to Pre-Auth File Deletion & Admin RCE

PKSA-9fw1-5251-nmm8 CVE-2025-67737 GHSA-9449-rphm-mjqr

Affected version: <=0.23.1

Reported by:
GitHub

[CRITICAL] AzuraCast missing brute force prevention

PKSA-fdpp-x827-jm1y CVE-2023-2531 GHSA-4m7v-wr6v-2mw5

Affected version: <0.18.3

Reported by:
GitHub

[LOW] AzuraCast/AzuraCast vulnerable to cross-site scripting

PKSA-64k6-nw81-h316 CVE-2023-2191 GHSA-q55c-hmpf-6h2g

Affected version: <0.18.0

Reported by:
GitHub