CVE-2026-77066 | omnivore-app Omnivore Subscription index.ts scanFeedsResolver url information disclosure

August 20, 2026 Yanac

A vulnerability classified as problematic was found in omnivore-app Omnivore. The affected element is the function scanFeedsResolver of the file packages/api/src/resolvers/subscriptions/index.ts of the component Subscription. Executing a manipulation of the argument url can lead to information disclosure.

This vulnerability is tracked as CVE-2026-77066. The attack can be launched remotely. No exploit exists.

It is advisable to implement a patch to correct this issue.VulDB Recent EntriesRead More