Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2025-32947

PeerTube ActivityPub Crawl Infinite Loop DoS

Description

This vulnerability allows any attacker to cause the PeerTube server to stop responding to requests due to an infinite loop in the "inbox" endpoint when receiving crafted ActivityPub activities.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Chocobozzz/PeerTube

Default version status: unaffected

  • 0 to < 7.1.1affected

References