CVE-2023-51442

High

Advisory

Published 19 Dec 2023In the index since 6 Sept 2026

Authentication bypass vulnerability in navidrome's subsonic endpoint

Carried by container images the latest versions of 2 of 17,781 indexed charts deploy, on 2 images.

Affected package	Affected versions	Fixed in	Images
github.com/navidrome/navidromegolang	v0.49.3, v0.50.0	0.50.2	2

2 by stars

Chart

Latest

Affected images

Radar Score

navidromeemmas-charts

1 of the 1 container images this version deploys carry CVE-2023-51442.

Container image	Digest	Package	Fixed in
deluan/navidrome :0.50.0	2cf4442b0099	github.com/navidrome/navidrome@v0.50.0	0.50.2

2,129

Navidromeemmas-charts

1 of the 1 container images this version deploys carry CVE-2023-51442.

Container image	Digest	Package	Fixed in
deluan/navidrome :0.49.3	11a24da08977	github.com/navidrome/navidrome@v0.49.3	0.50.2

2,837

2 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
deluan/navidrome :0.49.3	11a24da08977	github.com/navidrome/navidrome@v0.49.3	0.50.2	1
deluan/navidrome :0.50.0	2cf4442b0099	github.com/navidrome/navidrome@v0.50.0	0.50.2	1