Packagist/privatebin/privatebin CVE-2025-62796: medium 5.8, EPSS 0.29%

PrivateBin is missing HTML sanitization of attached filename in file size hint

Action: Upgrade privatebin/privatebin to 2.0.2 or later.

composer require privatebin/privatebin:2.0.2

Affected

Fixed versions

Sources

• osv: GHSA-867c-p784-5q6g
• https://github.com/PrivateBin/PrivateBin/security/advisories/GHSA-867c-p784-5q6g
• https://nvd.nist.gov/vuln/detail/CVE-2025-62796
• https://github.com/PrivateBin/PrivateBin/pull/1550
• https://github.com/PrivateBin/PrivateBin/commit/c4f8482b3072be7ae012cace1b3f5658dcc3b42e
• https://github.com/PrivateBin/PrivateBin

CVE-2025-62796 · published 2025-10-28T20:14:09Z · modified 2026-09-10T03:50:29.475244837Z · JSON