CVE-2021-39183

Owncast is an open source, self-hosted live video streaming and chat server. In affected versions inline scripts are executed when Javascript is parsed via a paste action. This issue is patched in 0.0.9 by blocking unsafe-inline Content Security Policy and specifying the script-src. The worker-src is required to be set to blob for the video player.

• CWE-79

• https://github.com/owncast/owncast/security/advisories/GHSA-2hfj-cxw7-g45pExploit, Patch, Third Party Advisory
• https://github.com/owncast/owncast/security/advisories/GHSA-2hfj-cxw7-g45pExploit, Patch, Third Party Advisory

Published

Dec 14, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-39178Next.js is a React framework. Versions of Next.js between 10…6.1
• CVE-2021-39179DHIS 2 is an information system for data capture, management…8.8
• CVE-2021-3918json-schema is vulnerable to Improperly Controlled Modificat…9.8
• CVE-2021-39180OpenOLAT is a web-based learning management system (LMS). A …8.8
• CVE-2021-39181OpenOlat is a web-based learning management system (LMS). Pr…8.8
• CVE-2021-39182EnroCrypt is a Python module for encryption and hashing. Pri…7.5
• CVE-2021-39184Electron is a framework for writing cross-platform desktop a…8.6
• CVE-2021-39185Http4s is a minimal, idiomatic Scala interface for HTTP serv…9.1
• CVE-2021-39186GlobalNewFiles is a MediaWiki extension maintained by Mirahe…6.1
• CVE-2021-39187Parse Server is an open source backend that can be deployed …7.5
• CVE-2021-39189Pimcore is an open source data & experience management platf…5.3
• CVE-2021-3919A potential security vulnerability has been identified in OM…9.8