Owncast Project Owncast — known CVE vulnerabilities

Every CVE whose affected-product data names Owncast Project Owncast, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2022-3751 — CVSS 9.8 (critical): SQL Injection in GitHub repository owncast/owncast prior to 0.0.13.
• CVE-2023-46480 — CVSS 9.8 (critical): An issue in OwnCast v.0.1.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via the authHost parameter…
• CVE-2021-39183 — CVSS 8.2 (high): Owncast is an open source, self-hosted live video streaming and chat server. In affected versions inline scripts are executed when…
• CVE-2024-29026 — CVSS 8.2 (high): Owncast is an open source, self-hosted, decentralized, single user live video streaming and chat server. In versions 0.1.2 and prior, a…
• CVE-2023-3188 — CVSS 6.5 (medium): Server-Side Request Forgery (SSRF) in GitHub repository owncast/owncast prior to 0.1.0.
• CVE-2024-31450 — CVSS 2.7 (low): Owncast is an open source, self-hosted, decentralized, single user live video streaming and chat server. The Owncast application exposes an…