PatchSiren

Chocobozzz CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM Chocobozzz CVE published 2026-07-10

CVE-2026-57167

PeerTube, an ActivityPub-federated video streaming platform, had a vulnerability in server-side-rendered video watch pages prior to version 8.2.2. The platform embeds a schema.org JSON-LD block by JSON.stringify-ing video metadata without escaping less-than, greater-than, or slash characters, allowing a value containing the byte sequence that closes a script element to inject arbitrary HTML or JavaScript [truncated]