Misskey-dev vulnerabilities
38 CVEs and advisories name Misskey-dev as an affected vendor, newest first. Follow it as a feed.
- CVE-2023-49079Misskey's missing signature validation allows arbitrary users to impersonate any remote user.
- CVE-2023-43793Misskey allows users to bypass authentication of Bull dashboard
- CVE-2023-24810Cross site scripting (XSS) vulnerability using authentication callback in Misskey
- CVE-2023-24811Cross site scripting (XSS) vulnerability using url preview in Misskey
- CVE-2023-24812SQL injection of notes/search-by-tag
- CVE-2023-25154Cross site scripting (XSS) of ActivityPub URI in misskey
- CVE-2021-39195Server-Side Request Forgery vulnerability in misskey
- CVE-2021-39169XSS vulnerability using dialog