CVE-2025-27155

Pinecone is an experimental overlay routing protocol suite which is the foundation of the current P2P Matrix demos. The Pinecone Simulator pineconesim included in Pinecone up to commit ea4c337 is vulnerable to stored cross-site scripting. The payload storage is not permanent and will be wiped whe...

PT-2025-9685

Name of the Vulnerable Software and Affected Versions Pinecone versions up to commit ea4c337 Description The issue concerns stored cross-site scripting in the Pinecone Simulator pineconesim. The payload storage is temporary and will be deleted when pineconesim is restarted. Recommendations For...

CVE-2025-27155: Improper Neutralization of Input During Web Page Generation

Pinecone is an experimental overlay routing protocol suite which is the foundation of the current P2P Matrix demos. The Pinecone Simulator pineconesim included in Pinecone up to commit ea4c337 is vulnerable to stored cross-site scripting. The payload storage is not permanent and will be wiped whe...