← All advisories

Medium severity6.1NVD Advisory· Published Sep 15, 2021· Updated Jun 17, 2026

CVE-2021-3780

CVE-2021-3780

Description

peertube is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
peertubenpm	< 3.4.0	3.4.0

Affected products

3

Framasoft/Peertube
cpe:2.3:a:framasoft:peertube:*:*:*:*:*:*:*:*
Range: <3.4.0
ghsa-coords
pkg:npm/peertube
Range: < 3.4.0
chocobozzz/chocobozzz/peertubev5
Range: unspecified

Patches

Vulnerability mechanics

References

4

github.com/chocobozzz/peertube/commit/0ea2f79d45b301fcd660efc894469a99b2239bf6nvdPatchThird Party AdvisoryWEB
huntr.dev/bounties/282807a8-4bf5-4fe2-af62-e05f945b3d65nvdExploitThird Party AdvisoryWEB
github.com/advisories/GHSA-f2c5-997w-7f5cghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2021-3780ghsaADVISORY

News mentions

0

No linked articles in our index yet.