Vulnerability index

Browse CVEs

33 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

Mastodon CRITICAL 9.8

CVE-2022-24307

Mastodon before 3.3.2 and 3.4.x before 3.4.6 has incorrect access control because it does not compact incoming signed JSON-LD activities. (JSON-LD si…

Fix: 3.3.2 / 3.4.6+

Fix from $2,300 2022-02-03

Mastodon MEDIUM 6.1

CVE-2022-0432

Prototype Pollution in GitHub repository mastodon/mastodon prior to 3.5.0.

Fix: 3.5.0+

Fix from $1,600 2022-02-02

Mastodon CRITICAL 9.8

CVE-2018-21018

Mastodon before 2.6.3 mishandles timeouts of incompletely established sessions.

Fix: 2.6.3+

Fix from $2,300 2019-09-22