TI-2026-40342 CVE-2026-55891 · GHSA-xrjc-c68j-hp7w
PrivateBin: Reflected JSON injection in backend responses via unescaped REQUEST_URI
Priority LOW 36
PrivateBin is an online pastebin where the server has zero knowledge of pasted data.
Vulnerabilities
8 records
TI-2026-40210 CVE-2026-55696 · GHSA-f2xf-7x3g-4272
Cross-site scripting in PrivateBin
Priority LOW 20
PrivateBin is an online pastebin where the server has zero knowledge of pasted data.
TI-2025-40060 CVE-2025-64714 · GHSA-g2j9-g8r5-rg82
PrivateBin's template-switching feature allows arbitrary local file inclusion through path traversal
Priority LOW 33
PrivateBin is an online pastebin where the server has zero knowledge of pasted data.
TI-2025-40057 CVE-2025-64711 · GHSA-r9x7-7ggj-fx9f
PrivateBin vulnerable to malicious filename use for self-XSS / HTML injection locally for users
Priority MEDIUM 58
PrivateBin is an online pastebin where the server has zero knowledge of pasted data.
TI-2025-38979 CVE-2025-62796 · GHSA-867c-p784-5q6g
PrivateBin persistent HTML injection in attachment filename enables redirect and defacement
Priority HIGH 65
PrivateBin is an online pastebin where the server has zero knowledge of pasted data.
TI-2024-26793 CVE-2024-39899 · GHSA-mqqj-fx8h-437j
PrivateBin allows shortening of URLs for other domains
Priority LOW 31
PrivateBin is an online pastebin where the server has zero knowledge of pasted data.
TI-2022-08646 CVE-2022-24833 · GHSA-cqcc-mm6x-vmvw
Persistent Cross-site Scripting (XSS) vulnerability in PrivateBin
Priority HIGH 69
PrivateBin is minimalist, open source online pastebin clone where the server has zero knowledge of pasted data.
TI-2020-04279 CVE-2020-5223 · GHSA-8j72-p2wm-6738
Persistent XSS vulnerability in filename of attached file in PrivateBin
Priority LOW 28
In PrivateBin versions 1.2.0 before 1.2.2, and 1.3.0 before 1.3.2, a persistent XSS attack is possible.