Skip to main content
cve.nowby Sazabi
← crates.io
crates.ioPackage

lemmy_routes

1 known vulnerability (1 high), with the versions each affects and the releases that fix them.

Latest release
0.18.2 (Jul 11, 2023): affected by CVE-2026-29178
Newest unaffected release
Every release is affected by at least one advisory
Advisories
1 · 1 high
Weekly downloads
14
Dependents
0
Releases
59 since 0.12.0 (Sep 3, 2021)
Registry
crates.io
Releases read
Nov 8, 2026

Version timeline

  • CVE-2026-29178
    Affects 0.11.3-rc.5 to 0.19.1-rc.1 (through the newest release)
Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 1

  • Lemmy: Unauthenticated SSRF via file_type query parameter injection in image endpoint

    Affected: fixed in 0.19.16.

    No fix released. The advisory names 0.19.16 as the fix, which the registry doesn't have yet. The latest release, 0.18.2, is still affected.

    100% of lemmy_routes downloads in the last 90 days were affected versions (180).