[HIGH] AVideo: Unauthenticated PHP session store exposed to host network via published memcached port

PKSA-876z-dgrg-zwqs CVE-2026-29093 GHSA-xxpw-32hf-q8v9

Affected package: wwbn/avideo

Affected version: <=21.0

Reported by:
GitHub