Conversation

Notices

1. Embed this notice
   PeerTube (peertube@framapiaf.org)'s status on Tuesday, 18-Aug-2026 14:35:59 JST PeerTube

   in reply to

   • Ari [APz] Sovijärvi

   @apzpins It is currently bug hunted, it's the reason you see so many releases that fix vulnerabilities.

   • Embed this notice
     Ari [APz] Sovijärvi (apzpins@some.apz.fi)'s status on Tuesday, 18-Aug-2026 14:36:01 JST Ari [APz] Sovijärvi

     I truly hope #peertube will have some sort of an extreme bug hunt because this year it has leaked worse than a sieve. One critical hole after another. It even has the questionable honor of being the first ever online service run by me that got broken into, although I managed to neutralize it before anything got done.

     What's worse is that last time I checked, the Peertube instances that contact mine are often wildly out of date. I see people leaving comments on those about the installation being wide open.

     In case you missed it, the last one patched a hole where anyone could pretty much do whatever to your playlists.

     https://github.com/Chocobozzz/PeerTube/security/advisories/GHSA-37jf-59fg-9hpr

     #peertube #infosec #vulnerability #fediverse