CVE-2026-55696
1 advisory.
Packagist/privatebin/privatebin CVE-2026-55696: medium 4.3, EPSS 0.37%
PrivateBin has stored Cross-Side-Scripting (XSS) vulnerability in attachment download link via dangerous MIME types with required user-interaction
Action: Upgrade privatebin/privatebin to 2.0.5 or later.
composer require privatebin/privatebin:2.0.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.5 | - |
Fixed versions
| 2.0.5 |
Sources
- osv: GHSA-f2xf-7x3g-4272
- https://github.com/PrivateBin/PrivateBin/security/advisories/GHSA-f2xf-7x3g-4272
- https://github.com/PrivateBin/PrivateBin/commit/e0dd4c025c19a182b6a4c6fb77a8bf81ceff6899
- https://github.com/PrivateBin/PrivateBin
- https://github.com/PrivateBin/PrivateBin/releases/tag/2.0.5
CVE-2026-55696 · published · modified · JSON