How many CVEs does framasoft have?

framasoft has 16 published CVE records since 2017, including 7 in the last two years.

How many framasoft CVEs are in CISA KEV?

None of framasoft's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which framasoft products have the most CVEs?

The framasoft products with the most published CVEs are peertube, framadate.

What are the most common weakness types in framasoft CVEs?

framasoft's CVEs most often map to these CWE weakness types: CWE-284 (Improper Access Control), CWE-282 (Improper Ownership Management), CWE-918 (Server-Side Request Forgery (SSRF)), CWE-409 (Improper Handling of Highly Compressed Data (Data Amplification)).

Are there public exploits for framasoft vulnerabilities?

Yes — 14 of framasoft's CVEs have a known public exploit.

How many critical framasoft vulnerabilities are there?

framasoft has 1 critical and 4 high-severity CVEs.

What is the average severity of framasoft CVEs?

The average CVSS base score across framasoft's scored CVEs is 6.2.

RadicalNotion.AI

Log in Create an account

16 CVEs

framasoft Vulnerabilities

Name: framasoft vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for framasoft.

16

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

14

Public exploits

PoC or exploit code

6.2

Avg CVSS

2017–2025

Overview

framasoft has 16 published CVE records since 2017, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 14 have a known public exploit. The average CVSS base score across scored CVEs is 6.2.

Security scorecard

A quick read on framasoft's vulnerability posture, as a share of its 16 published CVEs.

Average CVSS: 6.2
Critical / high: 31%
Actively exploited (KEV): 0%
Public exploit available: 88%
Patch available: 94%

Severity and exploitation

How the CVSS severity of framasoft's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High4

Medium11

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of framasoft's CVEs are currently listed in CISA's KEV catalog.

Public exploits

14

14 of framasoft's CVEs have a known public exploit available.

Most affected products

The framasoft products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in framasoft CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish framasoft CVE records.

Disclosure activity by year

How many framasoft CVEs were published each year.

2017

1

2021

1

2022

7

2025

7

Latest framasoft CVEs

The most recently disclosed vulnerabilities affecting framasoft.

PeerTube User Import Authenticated Resource Exhaustion
CWE-409
Medium · CVSS 6.5
EPSS 0.6%2025-04-15
PeerTube ActivityPub Playlist Creation Blind SSRF and DoS
CWE-843
High · CVSS 7.5
EPSS 0.6%2025-04-15
PeerTube ActivityPub Crawl Infinite Loop DoS
CWE-835
High · CVSS 7.5
EPSS 0.8%2025-04-15
PeerTube Arbitrary Playlist Creation via ActivityPub Protocol
CWE-282
Medium · CVSS 5.3
EPSS 0.4%2025-04-15
PeerTube Arbitrary Playlist Creation via REST API
CWE-282
Medium · CVSS 4.3
EPSS 0.3%2025-04-15
PeerTube User Import Authenticated Persistent Denial of Service
CWE-248
Medium · CVSS 6.5
EPSS 0.6%2025-04-15
PeerTube HLS Video Files Path Traversal
CWE-22
Medium · CVSS 4.3
EPSS 0.5%2025-04-15
Medium vulnerability · 2022-03-09
CWE-922
Medium · CVSS 6.5
EPSS 1.1%2022-03-09
Medium vulnerability · 2022-02-23
CWE-284
Medium · CVSS 5.4
EPSS 0.7%2022-02-23
Missing Authorization in chocobozzz/peertube
CWE-862
Medium · CVSS 5.4
EPSS 0.7%2022-02-23
Server-Side Request Forgery in @peertube/embed-api
CWE-918
Medium · CVSS 5.3
EPSS 0.9%2022-02-08
Medium vulnerability · 2022-01-11
CWE-284
Medium · CVSS 4.3
EPSS 0.7%2022-01-11

Get an alert for each new framasoft CVE, with AI-written analysis and remediation steps.

Monitor framasoft CVEs

Other vendors

CVE counts for other vendors.

microsoft41,739 CVEs linux25,260 CVEs Google17,495 CVEs Apple15,495 CVEs Oracle13,348 CVEs Debian10,233 CVEs IBM9,452 CVEs Red Hat8,581 CVEs

Browse all vendors

Frequently asked questions

Common questions about framasoft vulnerabilities.

How many CVEs does framasoft have?: framasoft has 16 published CVE records since 2017, including 7 in the last two years.
How many framasoft CVEs are in CISA KEV?: None of framasoft's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which framasoft products have the most CVEs?: The framasoft products with the most published CVEs are peertube, framadate.
What are the most common weakness types in framasoft CVEs?: framasoft's CVEs most often map to these CWE weakness types: CWE-284 (Improper Access Control), CWE-282 (Improper Ownership Management), CWE-918 (Server-Side Request Forgery (SSRF)), CWE-409 (Improper Handling of Highly Compressed Data (Data Amplification)).
Are there public exploits for framasoft vulnerabilities?: Yes — 14 of framasoft's CVEs have a known public exploit.
How many critical framasoft vulnerabilities are there?: framasoft has 1 critical and 4 high-severity CVEs.
What is the average severity of framasoft CVEs?: The average CVSS base score across framasoft's scored CVEs is 6.2.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track framasoft vulnerabilities

Get an alert for each new framasoft CVE, with AI-written analysis and remediation steps.

Create an account See pricing