CVE-2026-67339 vulnerabilities

Vulnerabilities for packages: nextcloud-server, drupal, privatebin...

CVE-2026-67355 vulnerabilities

Vulnerabilities for packages: nextcloud-server, drupal, privatebin...

CVE-2026-67354 vulnerabilities

Vulnerabilities for packages: nextcloud-server, drupal, privatebin...

GHSA-MJRX-74JH-7XGW vulnerabilities

Vulnerabilities for packages: nextcloud-server, drupal, privatebin...

GHSA-MQQ9-GXG5-M58G vulnerabilities

Vulnerabilities for packages: nextcloud-server, drupal, privatebin...

CVE-2026-67353 vulnerabilities

Vulnerabilities for packages: nextcloud-server, drupal, privatebin...

GHSA-WM3W-8RRP-J577 vulnerabilities

Vulnerabilities for packages: nextcloud-server, drupal, privatebin...

GHSA-H95V-H523-3MW8 vulnerabilities

Vulnerabilities for packages: nextcloud-server, drupal, privatebin...

GHSA-94PJ-82F3-465W vulnerabilities

Vulnerabilities for packages: nextcloud-server, drupal, privatebin...

GHSA-F283-GHQC-FG79 vulnerabilities

Vulnerabilities for packages: nextcloud-server, drupal, privatebin...

CVE-2026-55767 vulnerabilities

Vulnerabilities for packages: nextcloud-server, drupal, privatebin...

GHSA-CWXW-98QJ-8QJX vulnerabilities

Vulnerabilities for packages: nextcloud-server, drupal, privatebin...

CVE-2026-55766 vulnerabilities

Vulnerabilities for packages: nextcloud-server, drupal, privatebin...

CVE-2026-55568 vulnerabilities

Vulnerabilities for packages: nextcloud-server, drupal, privatebin...

GHSA-VM85-HXW5-5432 vulnerabilities

Vulnerabilities for packages: nextcloud-server, drupal, privatebin...

GHSA-WPWQ-4J6V-78M3 vulnerabilities

Vulnerabilities for packages: nextcloud-server, drupal, privatebin...

CVE-2024-39899

PrivateBin is an online pastebin where the server has zero knowledge of pasted data. In v1.5, PrivateBin introduced the YOURLS server-side proxy. The idea was to allow using the YOURLs URL shortener without running the YOURLs instance without authentication and/or exposing the authentication toke...

Self Cross-Site Scripting (Self-XSS)

privatebin/privatebin is vulnerable to self cross-site scripting Self-XSS. The vulnerability is due to improper handling and reflection of HTML content in filenames via the drag-and-drop helper, which allows an attacker to trick a macOS or Linux user into attaching a maliciously crafted file and...

Local File Inclusion (LFI)

PrivateBin is vulnerable to Local File Inclusion LFI. The vulnerability is due to improper validation of the template cookie in the template-switching feature, which allows an attacker to include arbitrary PHP files and potentially read sensitive data or achieve remote code execution...

Persistent HTML Injection

privatebin/privatebin is vulnerable to persistent HTML injection. The vulnerability is due to an unsanitized attachment filename attachmentname when attachments are enabled, which allows an attacker to modify the filename before encryption so that, after decryption, arbitrary HTML is inserted...