Browse CVEs

HIGH 7.5 CVE-2025-32947 This vulnerability allows any attacker to cause the PeerTube server to stop responding to requests due to an infinite loop in the "inbox" endpoint wh… Peertube 7.1.1+ Fix from $1,9502025-04-15 HIGH 7.5 CVE-2025-32948 The vulnerability allows any attacker to cause the PeerTube server to stop functioning, or in special cases send requests to arbitrary URLs (Blind SS… Peertube 7.1.1+ Fix from $1,9502025-04-15 MEDIUM 6.5 CVE-2025-32949 This vulnerability allows any authenticated user to cause the server to consume very large amounts of disk space when extracting a Zip Bomb. If use… Peertube 7.1.1+ Fix from $1,6002025-04-15 MEDIUM 6.5 CVE-2025-32944 The vulnerability allows any authenticated user to cause the PeerTube server to stop functioning in a persistent manner.  If user import is enabled (… Peertube 7.1.1+ Fix from $1,6002025-04-15 MEDIUM 5.3 CVE-2025-32946 This vulnerability allows any attacker to add playlists to a different user’s channel using the ActivityPub protocol. The vulnerable code sets the ow… Peertube 7.1.1+ Fix from $1,6002025-04-15 MEDIUM 6.5 CVE-2022-0881 Insecure Storage of Sensitive Information in GitHub repository chocobozzz/peertube prior to 4.1.1. Peertube 4.1.1+ Fix from $1,6002022-03-09 MEDIUM 5.4 CVE-2022-0727 Improper Access Control in GitHub repository chocobozzz/peertube prior to 4.1.0. Peertube 4.1.0+ Fix from $1,6002022-02-23 MEDIUM 5.4 CVE-2022-0726 Missing Authorization in GitHub repository chocobozzz/peertube prior to 4.1.0. Peertube 4.1.0+ Fix from $1,6002022-02-23 MEDIUM 5.3 CVE-2022-0508 Server-Side Request Forgery (SSRF) in GitHub repository chocobozzz/peertube prior to f33e515991a32885622b217bf2ed1d1b0d9d6832 Peertube 2021-12-13+ Fix from $1,6002022-02-08 HIGH 7.5 CVE-2022-0133 peertube is vulnerable to Improper Access Control Peertube 2022-01-06+ Fix from $1,9502022-01-10 HIGH 7.5 CVE-2022-0132 peertube is vulnerable to Server-Side Request Forgery (SSRF) Peertube Patch available Fix from $1,9502022-01-10 MEDIUM 6.1 CVE-2021-3780 peertube is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Peertube 3.4.0+ Fix from $1,6002021-09-15 CRITICAL 9.8 CVE-2017-1000039 Framadate version 1.0 is vulnerable to Formula Injection in the CSV Export resulting possible Information Disclosure and Code Execution Framadate Mitigation only Fix from $2,3002017-07-17