Chocobozzz

8 CVEs across 2 Chocobozzz products. Browse Chocobozzz vulnerabilities, severities, and proof-of-concept exploits.

Chocobozzz products with known CVEs

ProductCVEs
Chocobozzz/peertube8
Peertube3
Chocobozzz CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-73211Critical9.82026-08-11PeerTube is an ActivityPub-federated video streaming platform. Prior to 8.1.6, ActorFollowModel.updateScore() interpolates the attacker-controlled ActivityPub…
CVE-2026-73090Critical9.32026-08-11PeerTube is an ActivityPub-federated video streaming platform. Prior to 8.2.2, processUpdateActivity and processUpdateVideo accept an ActivityPub Update contai…
CVE-2026-571672026-07-10PeerTube is an ActivityPub-federated video streaming platform. Prior to 8.2.2, server-side-rendered video watch pages embed a schema.org JSON-LD block by JSON…
CVE-2022-0881Medium6.52022-03-09Insecure Storage of Sensitive Information in GitHub repository chocobozzz/peertube prior to 4.1.1.
CVE-2022-0727Medium5.42022-02-23Improper Access Control in GitHub repository chocobozzz/peertube prior to 4.1.0.
CVE-2022-0726Medium5.42022-02-23Missing Authorization in GitHub repository chocobozzz/peertube prior to 4.1.0.
CVE-2022-0508Medium5.32022-02-08Server-Side Request Forgery (SSRF) in GitHub repository chocobozzz/peertube prior to f33e515991a32885622b217bf2ed1d1b0d9d6832
CVE-2022-0170Medium4.32022-01-11peertube is vulnerable to Improper Access Control
CVE-2022-0133High7.52022-01-10peertube is vulnerable to Improper Access Control
CVE-2022-0132High7.52022-01-10peertube is vulnerable to Server-Side Request Forgery (SSRF)
CVE-2021-3780Medium6.12021-09-15peertube is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')