# PeerTube v8.1.6

- Product: PeerTube (https://whatsnew.fyi/product/peertube)
- Vendor: Framasoft
- Date: 2026-05-20
- Version: v8.1.6
- Original notes: https://github.com/Chocobozzz/PeerTube/releases/tag/v8.1.6
- Permalink: https://whatsnew.fyi/product/peertube/releases/v8.1.6

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **security** — Fix SQL injection coming from actor inbox URL when updating actor follow scores
- **security** — Reject JSON-LD objects with special properties
- **security** — Restrict role assignment to administrators only
- **security** — Prevent external auth token replay
- **security** — Prevent SSRF on import and channel sync
- **security** — Apply stricter rate limit to ask password reset

###### IMPORTANT NOTES

 * Follow v8.1.0 IMPORTANT NOTES if you upgrade from PeerTube <= v8.0.2

###### SECURITY

 * Fix SQL injection coming from actor inbox URL when updating actor follow scores. Thanks to **Nagarajan Selvaraj Paulmony** for reporting this vulnerability :pray: https://github.com/Chocobozzz/PeerTube/security/advisories/GHSA-pqr4-34h8-g39x
 * Reject JSON-LD objects with special properties. Thanks to **Mastodon security team** for reporting this vulnerability :pray:
 * Restricts role assignment to administrators only
 * Prevent external auth token replay
 * Prevent SSRF on import and channel sync
 * Stricter rate limit to ask password reset