Skip to content
OpenAdvisories
Medium · 6.5 CVE-2022-0508 EUVD-2022-1109GHSA-mv26-cx23-vrfg

Server-Side Request Forgery (SSRF) in chocobozzz/peertube

Published Feb 8, 2022 · Updated Aug 2, 2024 · Assigned by @huntrdev

Vendor: Chocobozzz Product: chocobozzz/peertube Package: @peertube/embed-api Ecosystem: npm

Description

Server-Side Request Forgery (SSRF) in GitHub repository chocobozzz/peertube prior to f33e515991a32885622b217bf2ed1d1b0d9d6832

Affected products

VendorProductAffectedFixed
chocobozzz chocobozzz/peertube unspecified – < f33e515991a32885622b217bf2ed1d1b0d9d6832 f33e515991a32885622b217bf2ed1d1b0d9d6832

Affected packages

EcosystemPackageAffectedFixedRecord
npm @peertube/embed-api < 4.1.0-rc.1 4.1.0-rc.1 GHSA-mv26-cx23-vrfg

References