Packagist/privatebin/privatebin CVE-2025-64714: medium 5.8, EPSS 0.53%
PrivateBin's template-switching feature allows arbitrary local file inclusion through path traversal
Action: Upgrade privatebin/privatebin to 2.0.3 or later.
composer require privatebin/privatebin:2.0.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.7.7 | 2.0.3 | - |
Fixed versions
| 2.0.3 |
Sources
- osv: GHSA-g2j9-g8r5-rg82
- https://github.com/PrivateBin/PrivateBin/security/advisories/GHSA-g2j9-g8r5-rg82
- https://nvd.nist.gov/vuln/detail/CVE-2025-64714
- https://github.com/PrivateBin/PrivateBin/commit/4434dbf73ac53217fda0f90d8cf9b6110f8acc4f
- https://github.com/PrivateBin/PrivateBin
CVE-2025-64714 · published · modified · JSON