DistroKid
- Known vulnerabilities
- 0
- Still open
- 0
- KEV open
- 0
- Max CVSS (historical)
- —
Cumulative exposure
Low
Aggregates open CVEs (40%) + KEV (30%) + critical shared permissions (15%) + trackers (10%) + OS EOL (5%). Higher score = more exposed.
-
Open CVEs +0/+50
0 open CVEs, max CVSS 0.0, EPSS 0%
-
Active KEVs +0/+35
0 CISA KEVs still open
-
Permissions +0/+10
0 critical shared permission(s)
-
Trackers +0/+8
0 identification/profiling tracker(s)
-
EOL OS +0/+5
Installed OS is end-of-life
Based on permissions only: no CVE data referenced for this app.
Known vulnerabilities (CVE)
No CVE is currently referenced in NVD for this app on its platform.
The absence of CVEs is not a security guarantee — it can also mean nobody has audited or published findings.
Context
Context
Description
DistroKid is the easiest way to get your music on 150+ streaming platforms, including Spotify, Apple Music, TikTok, YouTube Music & more. Keep 100% of your earnings and upload as many songs as you want. Over 4 million independent artists worldwide trust DistroKid as their music distribution service. Features: · Enjoy easy, fast, unlimited uploads right from the app · Keep 100% of your earnings · Access your official artist accounts including Spotify for Artists, TikTok Artist Account, YouTube, and more · Create Promo Cards to share your release on socials · Get push notifications when you have earnings to claim and withdraw them seamlessly · Check your streaming stats on the go · Edit your releases anytime Log in with your existing DistroKid account or sign up to share your music with the world. Terms of Use: https://www.apple.com/legal/internet-services/itunes/dev/stdeula/
Data collected and shared
Source: App Store · App Privacy · 8 data item(s) declared
Indicative classification based on data sensitivity. "Shared" = transmitted to third parties (publisher-declared).
FAQ
FAQ: DistroKid
Why are no CVEs listed for DistroKid?
No CVE is currently referenced in NVD for DistroKid (com.distrokid.DistroKid) with a iOS CPE configuration. Either none has been publicly disclosed, or none has been mapped yet. Absence of a CVE is not a security guarantee.
What is the latest known version of DistroKid?
The most recent version of DistroKid (com.distrokid.DistroKid) tracked by Appaloosa Scout is 3.8.2, published by DistroKid Holdings, LLC.