PinePods vulnerabilities

CVEs whose affected-version data names the PinePods package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-55598Critical· 9.1PoC

1w ago

PinePods: Authenticated SSRF via podcast RSS enclosure URL (server-side fetch of attacker-controlled URL, no host validation)

PinePods is a complete, self-hosted podcast management system written in Rust. Prior to 0.9.0, an authenticated user can subscribe to an attacker-controlled RSS feed through `POST /api/data/add_podcast` in `rust-api/src/handlers/podcasts…

▾ Abyssalmadeofpendletonwool · PinePodsEPSS 0.33%via CVEORG