CyberSecBulletin

Chocobozzz vulnerabilities

We track 2 vulnerabilities in Chocobozzz products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 11, 2026.

2vulnerabilities
2critical
0high
0exploited
9.6average CVSS score

Latest Chocobozzz vulnerabilities

  • 9.8 Critical severity

    PeerTube: Improper Neutralization of Special Elements used in an SQL Command

    CVE-2026-73211Chocobozzz

    PeerTube is an ActivityPub-federated video streaming platform. Prior to 8.1.6, ActorFollowModel.updateScore() interpolates the attacker-controlled ActivityPub actor inboxUrl into an SQL query, allowing an unauthenticated remote server to read and write PeerTub

  • 9.3 Critical severity

    PeerTube: Incorrect Authorization

    CVE-2026-73090Chocobozzz

    PeerTube is an ActivityPub-federated video streaming platform. Prior to 8.2.2, processUpdateActivity and processUpdateVideo accept an ActivityPub Update containing a Video object without verifying that byActor.url is authorized for the host in videoObject.id,