What’s Vulnerable › Products

chocobozzz/peertube vulnerabilities

18 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 10 published in the last 12 months.

Check whether your chocobozzz/peertube version is affected

Latest chocobozzz/peertube vulnerabilities

• CVE-2026-73211 — PeerTube: Unauthenticated remote SQL injection in ActorFollowModel.updateScore() (CVSS 9.8)
• CVE-2026-73090 — PeerTube: Cross-origin remote video takeover via Update activity (CVSS 9.3)
• CVE-2026-57167 — PeerTube: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) (CVSS 5.1)
• CVE-2025-32949 — PeerTube User Import Authenticated Resource Exhaustion (CVSS 6.5)
• CVE-2025-32948 — PeerTube ActivityPub Playlist Creation Blind SSRF and DoS (CVSS 7.5)
• CVE-2025-32947 — PeerTube ActivityPub Crawl Infinite Loop DoS (CVSS 7.5)
• CVE-2025-32946 — PeerTube Arbitrary Playlist Creation via ActivityPub Protocol (CVSS 5.3)
• CVE-2025-32945 — PeerTube Arbitrary Playlist Creation via REST API (CVSS 4.3)
• CVE-2025-32944 — PeerTube User Import Authenticated Persistent Denial of Service (CVSS 6.5)
• CVE-2025-32943 — PeerTube HLS Video Files Path Traversal (CVSS 4.3)
• CVE-2022-0881 — Insecure Storage of Sensitive Information in chocobozzz/peertube (CVSS 6.5)
• CVE-2022-0727 — Improper Access Control in chocobozzz/peertube (CVSS 5.4)
• CVE-2022-0726 — Missing Authorization in chocobozzz/peertube (CVSS 5.4)
• CVE-2022-0508 — Server-Side Request Forgery (SSRF) in chocobozzz/peertube (CVSS 5.3)
• CVE-2022-0170 — Improper Access Control in chocobozzz/peertube (CVSS 4.3)
• CVE-2022-0133 — Improper Access Control in chocobozzz/peertube (CVSS 7.5)
• CVE-2022-0132 — Server-Side Request Forgery (SSRF) in chocobozzz/peertube (CVSS 7.5)
• CVE-2021-3780 — Cross-site Scripting (XSS) - Stored in chocobozzz/peertube (CVSS 6.1)