~ / search / GHSA-mv26-cx23-vrfg

GHSA-mv26-cx23-vrfg

Server-Side Request Forgery in @peertube/embed-api

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-0508

Packages

EcosystemPackageAffectedFixed in
npm @peertube/embed-api < 4.1.0-rc.1 4.1.0-rc.1

Details

As written in the advisory (Markdown source, shown as plain text).

@peertube/embed-api version 4.0.0 and prior is vulnerable to server-side request forgery.

References

External links from the advisory. They lead to third-party sites.