GHSA-32RQ-JHR7-M3HH vulnerabilities

Vulnerabilities for packages: drupal, nextcloud-server, privatebin...

GHSA-3FVR-2JW6-CRQ4 vulnerabilities

Vulnerabilities for packages: drupal, nextcloud-server, privatebin...

CVE-2026-67355 vulnerabilities

Vulnerabilities for packages: drupal, nextcloud-server, privatebin...

CVE-2026-67339 vulnerabilities

Vulnerabilities for packages: drupal, nextcloud-server, privatebin...

GHSA-MQQ9-GXG5-M58G vulnerabilities

Vulnerabilities for packages: drupal, nextcloud-server, privatebin...

GHSA-MJRX-74JH-7XGW vulnerabilities

Vulnerabilities for packages: drupal, nextcloud-server, privatebin...

CVE-2026-67353 vulnerabilities

Vulnerabilities for packages: drupal, nextcloud-server, privatebin...

CVE-2026-67354 vulnerabilities

Vulnerabilities for packages: drupal, nextcloud-server, privatebin...

GHSA-WM3W-8RRP-J577 vulnerabilities

Vulnerabilities for packages: drupal, nextcloud-server, privatebin...

GHSA-F283-GHQC-FG79 vulnerabilities

Vulnerabilities for packages: drupal, nextcloud-server, privatebin...

GHSA-94PJ-82F3-465W vulnerabilities

Vulnerabilities for packages: drupal, nextcloud-server, privatebin...

GHSA-H95V-H523-3MW8 vulnerabilities

Vulnerabilities for packages: drupal, nextcloud-server, privatebin...

GHSA-CWXW-98QJ-8QJX vulnerabilities

Vulnerabilities for packages: drupal, nextcloud-server, privatebin...

CVE-2026-55767 vulnerabilities

Vulnerabilities for packages: drupal, nextcloud-server, privatebin...

GHSA-WPWQ-4J6V-78M3 vulnerabilities

Vulnerabilities for packages: drupal, nextcloud-server, privatebin...

CVE-2026-55766 vulnerabilities

Vulnerabilities for packages: drupal, nextcloud-server, privatebin...

CVE-2026-55568 vulnerabilities

Vulnerabilities for packages: drupal, nextcloud-server, privatebin...

GHSA-VM85-HXW5-5432 vulnerabilities

Vulnerabilities for packages: drupal, nextcloud-server, privatebin...

CVE-2024-39899

PrivateBin is an online pastebin where the server has zero knowledge of pasted data. In v1.5, PrivateBin introduced the YOURLS server-side proxy. The idea was to allow using the YOURLs URL shortener without running the YOURLs instance without authentication and/or exposing the authentication toke...

Self Cross-Site Scripting (Self-XSS)

privatebin/privatebin is vulnerable to self cross-site scripting Self-XSS. The vulnerability is due to improper handling and reflection of HTML content in filenames via the drag-and-drop helper, which allows an attacker to trick a macOS or Linux user into attaching a maliciously crafted file and...