GHSA-xxpw-32hf-q8v9: AVideo: Unauthenticated PHP session store exposed to host network via published memcached port

AVideo's Docker setup publishes memcached (a session storage system) to port 11211 on the host network without any authentication, allowing attackers to read, modify, or delete user session data and impersonate users or admins. The vulnerability has a high severity score (CVSS 8.1) because session data contains sensitive information like user IDs, admin flags, and password hashes, and the memcached service lacks both SASL authentication (a security protocol) and network restriction flags.