Skip to content
OpenAdvisories

Vendor

Chocobozzz

11 known vulnerabilities.

Products

chocobozzz/peertube 8 PeerTube 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-73211

    PeerTube: Unauthenticated remote SQL injection in ActorFollowModel.updateScore()

    PeerTube is an ActivityPub-federated video streaming platform. Prior to 8.1.6, ActorFollowModel.updateScore() interpolates the attacker-controlled ActivityPub actor inboxUrl into an SQL query, allowing an unauthenticated remote server to read and write PeerTu…

    Chocobozzz PeerTube
  • Critical 9.3
    CVE-2026-73090

    PeerTube: Cross-origin remote video takeover via Update activity

    PeerTube is an ActivityPub-federated video streaming platform. Prior to 8.2.2, processUpdateActivity and processUpdateVideo accept an ActivityPub Update containing a Video object without verifying that byActor.url is authorized for the host in videoObject.id,…

    Chocobozzz PeerTube