CVE-2025-64711
1 advisory.
Packagist/privatebin/privatebin CVE-2025-64711: low 3.9, EPSS 0.13%
PrivateBin vulnerable to malicious filename use for self-XSS / HTML injection locally for users
Action: Upgrade privatebin/privatebin to 2.0.3 or later.
composer require privatebin/privatebin:2.0.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.7.7 | 2.0.3 | - |
Fixed versions
| 2.0.3 |
Sources
- osv: GHSA-r9x7-7ggj-fx9f
- https://github.com/PrivateBin/PrivateBin/security/advisories/GHSA-r9x7-7ggj-fx9f
- https://nvd.nist.gov/vuln/detail/CVE-2025-64711
- https://github.com/PrivateBin/PrivateBin/commit/f9550e513381208b36595ee2404e968144bba78b
- https://github.com/PrivateBin/PrivateBin
CVE-2025-64711 · published · modified · JSON