pkg:Packagist/privatebin/privatebin

All known vulnerabilities

• HIGH8.2CVE-2022-24833Persistent Cross-site Scripting vulnerability in PrivateBin
  >= 0.21, < 1.4.0
• MEDIUM6.1CVE-2020-5223Persistent XSS vulnerability in filename of attached file in PrivateBin
  from 0, < 1.2.2
• MEDIUM5.8CVE-2025-64714PrivateBin's template-switching feature allows arbitrary local file inclusion through path traversal
  >= 1.7.7, < 2.0.3
• MEDIUM5.8PrivateBin is missing HTML sanitization of attached filename in file size hint
  >= 1.7.7, < 2.0.2
• MEDIUM5.3PrivateBin allows shortening of URLs for other domains
  >= 1.5.0, < 1.7.4
• LOW3.9PrivateBin vulnerable to malicious filename use for self-XSS / HTML injection locally for users
  >= 1.7.7, < 2.0.3