PatchTheCVEframasoft vulnerabilities
Recent CVEs affecting framasoft products. 7 tracked.
framasoft has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 7. Most recent: 2025-04-15. Highest priority: CVE-2025-32947 (score 50/100).
- CVE-2025-32949 MEDIUM 6.5 UPGRADE This vulnerability allows any authenticated user to cause the server to consume very large amounts of disk spa
- CVE-2025-32948 HIGH 7.5 UPGRADE The vulnerability allows any attacker to cause the PeerTube server to stop functioning, or in special cases se
- CVE-2025-32947 HIGH 7.5 UPGRADE This vulnerability allows any attacker to cause the PeerTube server to stop responding to requests due to an i
- CVE-2025-32946 MEDIUM 5.3 UPGRADE This vulnerability allows any attacker to add playlists to a different user’s channel using the ActivityPub pr
- CVE-2025-32945 MEDIUM 4.3 UPGRADE The vulnerability allows an existing user to add playlists to a different user’s channel using the PeerTube RE
- CVE-2025-32944 MEDIUM 6.5 UPGRADE The vulnerability allows any authenticated user to cause the PeerTube server to stop functioning in a persiste
- CVE-2025-32943 LOW 3.7 UPGRADE The vulnerability allows any authenticated user to leak the contents of arbitrary “.m3u8” files from the PeerT
FAQ
How do I fix framasoft vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is framasoft being exploited right now?
None of the tracked framasoft CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which framasoft CVE should I patch first?
CVE-2025-32947 currently ranks highest (50/100): This vulnerability allows any attacker to cause the PeerTube server to stop responding to requests due to an i.