Search results

Vulnerability Audit Report

Status: Open.

#9210 In videojs/video.js;

· danrossi opened on Jul 1, 2026

Dependency Confusion Attack via Unregistered Internal npm Package (videojs-v8)

needs: triageThis issue needs to be reviewedThis issue needs to be reviewed

Status: Open.

#9201 In videojs/video.js;

· anguprasad07 opened on Jun 12, 2026

lol

Status: Open.

#9200 In videojs/video.js;

· brentspine opened on Jun 11, 2026

Support CSP style-src-attr 'none' by avoiding runtime inline style attributes

needs: triageThis issue needs to be reviewedThis issue needs to be reviewed

Status: Open.

#9198 In videojs/video.js;

· Cozmoz opened on May 30, 2026

Bug: Race condition in handleTechSourceset_() async callback

Status: Open.

#9187 In videojs/video.js;

· ai-bughunter opened on May 19, 2026

Bug: copyStyleSheetsToWindow() may fail if win.document.head is null

Status: Open.

#9186 In videojs/video.js;

· ai-bughunter opened on May 19, 2026

Bug: updateSourceCaches_() assumes srcObj has src and type properties

Status: Open.

#9185 In videojs/video.js;

· ai-bughunter opened on May 19, 2026

Bug: slider.js disable() and handleMouseDown() access this.bar.el_ without null check

Status: Open.

#9184 In videojs/video.js;

· ai-bughunter opened on May 19, 2026

Bug: one() with multiple event types removes all listeners on first trigger

Status: Open.

#9183 In videojs/video.js;

· ai-bughunter opened on May 19, 2026

Bug: Operator precedence confusion in fullscreen checks

Status: Open.

#9182 In videojs/video.js;

· ai-bughunter opened on May 19, 2026

Bug: TypeError when calling fullscreen methods after tech is unloaded

Status: Open.

#9181 In videojs/video.js;

· ai-bughunter opened on May 19, 2026

Audio and Video Syncronization Issue

Status: Open.

#9179 In videojs/video.js;

· Umair-219 opened on May 13, 2026