CVE-2026-55891
1 advisory.
Packagist/privatebin/privatebin CVE-2026-55891: unknown 0, EPSS 0.54%
PrivateBin has reflected JSON injection in backend responses via unescaped REQUEST_URI
Action: Upgrade privatebin/privatebin to 2.0.5 or later.
composer require privatebin/privatebin:2.0.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.5 | - |
Fixed versions
| 2.0.5 |
Sources
- osv: GHSA-xrjc-c68j-hp7w
- https://github.com/PrivateBin/PrivateBin/security/advisories/GHSA-xrjc-c68j-hp7w
- https://github.com/PrivateBin/PrivateBin/commit/75f056dcda955d94c17ec5a4f8c54a9b7bfcee07
- https://github.com/PrivateBin/PrivateBin
- https://github.com/PrivateBin/PrivateBin/releases/tag/2.0.5
CVE-2026-55891 · published · modified · JSON