Peertube vulnerabilities

2 known vulnerabilities in Peertube from Framasoft. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Peertube: Access of Resource Using Incompatible Type

  CVE-2025-32948Apr 15, 2025Framasoft

  The vulnerability allows any attacker to cause the PeerTube server to stop functioning, or in special cases send requests to arbitrary URLs (Blind SSRF). Attackers can send ActivityPub activities to PeerTube's "inbox" endpoint. By abusing the "Create Activity"

• 7.5 High severity

  Peertube: Loop with Unreachable Exit Condition

  CVE-2025-32947Apr 15, 2025Framasoft

  This vulnerability allows any attacker to cause the PeerTube server to stop responding to requests due to an infinite loop in the "inbox" endpoint when receiving crafted ActivityPub activities.