Login Request a demo
MI
Product
misskey
by misskey-dev · last CVE Oct 13, 2026
21
CVEs
0
On KEV
9.3
Max CVSS
3
New 30D
Vulnerabilities21In the news0Timeline
Severity mix
Critical 2High 8Medium 10Low 1
Severity
All severities21Critical2High8Medium10Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add misskey to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-57575
6.9
1%
Jul 10
Misskey: SSRF bypass in URL Preview
Affected: < 2026.6.0
CVE-2025-66482
6.5
0%
Dec 15
Misskey has a login rate limit bypass via spoofed X-Forwarded-For header
Affected: >= 2025.9.1, < 2025.12.0-alpha.2
CVE-2025-66402
6.5
0%
Dec 15
misskey.js's export data contains private post data
Affected: >= 13.0.0-beta.16, < 2025.12.0
CVE-2024-52590
6.5
0%
Dec 18
Missing validation allows spoofed profiles in Misskey
Affected: >= 2024.8.0-rc.3, < 2024.11.0-alpha.3
CVE-2026-48115
6.3
0%
Aug 3
Misskey: Improper Authorization in the Announcements API
Affected: >= 2024.5.0, < 2026.5.4
CVE-2024-52579
5.4
0%
Dec 18
Server-Side Request Forgery vulnerability in various APIs in Misskey
Affected: < 2024.11.0-alpha.3
CVE-2024-52592
5.3
0%
Dec 18
Missing validation allows spoofed poll updates in Misskey
Affected: >= 10.92.1, < 2024.11.0-alpha.3
CVE-2024-52593
5.3
0%
Dec 18
Missing validation allows spoofed "origin" links in Misskey
Affected: >= 12.29.0, < 2024.11.0-alpha.3
CVE-2026-46714
5.1
0%
Aug 3
Misskey: Denial of Service via Uncontrolled Recursion in Theme Compilation
Affected: >= 8.63.0, < 2026.5.4
CVE-2026-28433
4.3
0%
Mar 9
Misskey lacks resource ownership validation
Affected: >= 10.93.0, < 2026.3.1
Showing 10