Is Proxmox VE 8.4 affected?

EOL

3 known vulnerabilities affect 8.4 (highest CVSS 5.4).

Your branch 8 has reached end of life (Aug 31, 2026).

20 newer releases in its track, up to 8.4.21. What changed up to 8.4.21

A newer release line is out: 9.2.21.

Vulnerabilities affecting 8.4

5.4
CVE-2025-57538 A stored cross-site scripting (XSS) vulnerability in the HTTP Proxy field within the Datacenter configuration panel of Proxmox Virtual Environment (PVE) 8.4 allows an authenticated user to inject m…
5.4
CVE-2025-57539 A stored cross-site scripting (XSS) vulnerability in the U2F Origin field of the Datacenter configuration in Proxmox Virtual Environment (PVE) 8.4 allows authenticated users to store malicious inpu…
5.4
CVE-2025-57540 A stored cross-site scripting (XSS) vulnerability exists in the WebAuthn Relying Party field within the Datacenter configuration of Proxmox Virtual Environment (PVE) 8.4. Authenticated users can in…