Browse CVEs

HIGH 7.5 CVE-2026-28431 Misskey is an open source, federated social media platform. All Misskey servers running versions 8.45.0 and later, but prior to 2026.3.1, contain a v… Misskey 2026.3.1+ Fix from $1,9502026-03-10 HIGH 7.5 CVE-2026-28432 Misskey is an open source, federated social media platform. All Misskey servers prior to 2026.3.1 contain a vulnerability that allows bypassing HTTP … Misskey 2026.3.1+ Fix from $1,9502026-03-10 MEDIUM 6.5 CVE-2025-66402 Misskey is an open source, federated social media platform. Starting in version 13.0.0-beta.16 and prior to version 2025.12.0, an actor who does not … Misskey 2025.12.0+ Fix from $1,6002025-12-16 MEDIUM 6.5 CVE-2025-66482 Misskey is an open source, federated social media platform. Attackers who use an untrusted reverse proxy or not using a reverse proxy at all can bypa… Misskey 2025.12.0+ Fix from $1,6002025-12-16 HIGH 7.5 CVE-2025-46559 Misskey is an open source, federated social media platform. Starting in version 12.31.0 and prior to version 2025.4.1, missing validation in `Mk:api`… Misskey 2025.4.1+ Fix from $1,9502025-05-05 MEDIUM 6.1 CVE-2025-46553 @misskey-dev/summaly is a tool for getting a summary of a web page. Starting in version 3.0.1 and prior to version 5.2.1, a logic error in the main `… Summaly 5.2.1+ Fix from $1,6002025-05-05 MEDIUM 5.4 CVE-2025-46340 Misskey is an open source, federated social media platform. Starting in version 12.0.0 and prior to version 2025.4.1, due to an oversight in the vali… Misskey 2025.4.1+ Fix from $1,6002025-05-05 CRITICAL 9.3 CVE-2025-25306 Misskey is an open source, federated social media platform. The patch for CVE-2024-52591 did not sufficiently validate the relation between the `id` … Misskey 2025.2.1+ Fix from $2,3002025-03-10 HIGH 8.2 CVE-2025-24897 Misskey is an open source, federated social media platform. Starting in version 12.109.0 and prior to version 2025.2.0-alpha.0, due to a lack of CSRF… Misskey 2025.2.0+ Fix from $1,9502025-02-11 HIGH 8.1 CVE-2025-24896 Misskey is an open source, federated social media platform. Starting in version 12.109.0 and prior to version 2025.2.0-alpha.0, a login token named `… Misskey after 2025.1.0 Fix from $1,9502025-02-11 CRITICAL 9.3 CVE-2024-52591 Misskey is an open source, federated social media platform. In affected versions missing validation in `ApRequestService.signedGet` and `HttpRequestS… Misskey 2024.11.0+ Fix from $2,3002024-12-18 MEDIUM 6.5 CVE-2024-52590 Misskey is an open source, federated social media platform. In affected versions missing validation in `ApRequestService.signedGet` allows an attacke… Misskey 2024.11.0+ Fix from $1,6002024-12-18 MEDIUM 5.4 CVE-2024-52579 Misskey is an open source, federated social media platform. Some APIs using `HttpRequestService` do not properly check the target host. This vulnerab… Misskey 2024.11.0+ Fix from $1,6002024-12-18 MEDIUM 5.3 CVE-2024-52592 Misskey is an open source, federated social media platform. In affected versions missing validation in `ApInboxService.update` allows an attacker to … Misskey 2024.11.0+ Fix from $1,6002024-12-18 MEDIUM 5.3 CVE-2024-52593 Misskey is an open source, federated social media platform.In affected versions missing validation in `NoteCreateService.insertNote`, `ApPersonServic… Misskey 2024.11.0+ Fix from $1,6002024-12-18 HIGH 7.5 CVE-2024-32983 Misskey is an open source, decentralized microblogging platform. Misskey doesn't perform proper normalization on the JSON structures of incoming sign… Misskey 2024.5.0+ Fix from $1,9502024-06-03 HIGH 8.8 CVE-2024-25636 Misskey is an open source, decentralized social media platform with ActivityPub support. Prior to version 2024.2.0, when fetching remote Activity Str… Misskey 2024.2.0+ Fix from $1,9502024-02-19 CRITICAL 9.6 CVE-2023-52139 Misskey is an open source, decentralized social media platform. Third-party applications may be able to access some endpoints or Websocket APIs that … Misskey 2023.12.1+ Fix from $2,3002023-12-29 HIGH 7.5 CVE-2023-49079 Misskey is an open source, decentralized social media platform. Misskey's missing signature validation allows arbitrary users to impersonate any remo… Misskey 2023.11.1+ Fix from $1,9502023-11-29 HIGH 7.5 CVE-2023-43793 Misskey is an open source, decentralized social media platform. Prior to version 2023.9.0, by editing the URL, a user can bypass the authentication o… Misskey 2023.9.0+ Fix from $1,9502023-10-04 CRITICAL 9.8 CVE-2023-24812 Misskey is an open source, decentralized social media platform. In versions prior to 13.3.3 SQL injection is possible due to insufficient parameter v… Misskey 13.3.3+ Fix from $2,3002023-02-22 MEDIUM 6.1 CVE-2023-24810 Misskey is an open source, decentralized social media platform. Due to insufficient validation of the redirect URL during `miauth` authentication in … Misskey 13.3.1+ Fix from $1,6002023-02-22 MEDIUM 6.1 CVE-2023-24811 Misskey is an open source, decentralized social media platform. In versions prior to 13.3.2 the URL preview function is subject to a cross site scrip… Misskey 13.3.2+ Fix from $1,6002023-02-22 MEDIUM 6.1 CVE-2023-25154 Misskey is an open source, decentralized social media platform. In versions prior to 13.5.0 the link to the instance to the sender that appears when … Misskey 13.5.0+ Fix from $1,6002023-02-22 MEDIUM 6.5 CVE-2021-39195 Misskey is an open source, decentralized microblogging platform. In affected versions a Server-Side Request Forgery vulnerability exists in "Upload f… Misskey 12.90.0+ Fix from $1,6002021-09-07 MEDIUM 5.4 CVE-2021-39169 Misskey is a decentralized microblogging platform. In versions of Misskey prior to 12.51.0, malicious actors can use the web client built-in dialog t… Misskey 12.51.0+ Fix from $1,6002021-08-27 MEDIUM 6.1 CVE-2019-1020010 Misskey before 10.102.4 allows hijacking a user's token. Misskey 10.102.4 / 11.20.2+ Fix from $1,6002019-07-29