Threats affecting pkg:github/nexmoe/VidBee

CVE-2026-123787 is an information disclosure vulnerability in nexmoe VidBee affecting versions 1.3.0 through 1.3.13 and 2.0.0 through 2.0.2. The flaw exists in an unknown function within the Local HTTP Service component (apps/desktop/src/main/local-api.ts). An attacker can remotely exploit this weakness to disclose information. Public exploit code is available. Upgrading to version 2.2.0 addresses this issue.