{"uuid": "7a7823cd-eebf-4c4b-842e-93c08b570fbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-32949", "type": "seen", "source": "https://t.me/cvedetector/22971", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-32949 - PeerTube Zip Bomb Extraction Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2025-32949 \nPublished : April 15, 2025, 3:16 p.m. | 2\u00a0hours ago \nDescription : This vulnerability allows any authenticated user to cause the server to consume very large amounts of disk space when extracting a Zip Bomb.   \n  \nIf user import is enabled (which is the default setting), any registered user can upload an archive for importing. The code uses the yauzl library for reading the archive. The yauzl library does not contain any mechanism to detect or prevent extraction of a  Zip Bomb  . Therefore, when using the User Import functionality with a Zip Bomb, PeerTube will try extracting the archive which will cause a disk space resource exhaustion. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-15T19:57:11.000000Z"}