CVE-2025-32949

< 7.1.1

This vulnerability allows any authenticated user to cause the server to consume very large amounts of disk space when extracting a

6.5MEDIUM

CVE-2025-32948

< 7.1.1

The vulnerability allows any attacker to cause the PeerTube server to stop functioning, or in special cases send requests to arbit

7.5HIGH

CVE-2025-32947

< 7.1.1

This vulnerability allows any attacker to cause the PeerTube server to stop responding to requests due to an infinite loop in the

7.5HIGH

CVE-2025-32946

< 7.1.1

This vulnerability allows any attacker to add playlists to a different user’s channel using the ActivityPub protocol. The vulner

5.3MEDIUM

CVE-2025-32945

< 7.1.1

The vulnerability allows an existing user to add playlists to a different user’s channel using the PeerTube REST API. The vulner

4.3MEDIUM

CVE-2025-32944

< 7.1.1

The vulnerability allows any authenticated user to cause the PeerTube server to stop functioning in a persistent manner. If use

6.5MEDIUM

CVE-2025-32943

< 7.1.1

The vulnerability allows any authenticated user to leak the contents of arbitrary “.m3u8” files from the PeerTube server due t

3.7LOW

CVE-2022-0881

< 4.1.1

Insecure Storage of Sensitive Information in GitHub repository chocobozzz/peertube prior to 4.1.1.

6.5MEDIUM

CVE-2022-0727

< 4.1.0

Improper Access Control in GitHub repository chocobozzz/peertube prior to 4.1.0.

5.4MEDIUM

CVE-2022-0726

< 4.1.0

Missing Authorization in GitHub repository chocobozzz/peertube prior to 4.1.0.

5.4MEDIUM

CVE-2022-0508

< 2021-12-13

Server-Side Request Forgery (SSRF) in GitHub repository chocobozzz/peertube prior to f33e515991a32885622b217bf2ed1d1b0d9d6832

5.3MEDIUM

CVE-2022-0170

<= 4.0.0

peertube is vulnerable to Improper Access Control

4.3MEDIUM

CVE-2022-0133

< 2022-01-06

peertube is vulnerable to Improper Access Control

7.5HIGH

CVE-2022-0132

all versions

peertube is vulnerable to Server-Side Request Forgery (SSRF)

7.5HIGH

CVE-2021-3780

< 3.4.0

peertube is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

6.1MEDIUM