MI
Vendor
misskey-dev
19
CVEs
0
On KEV
3
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-103937 | MI misskey misskey-dev | 8.7 | Oct 13 | Misskey: Denial of service resulting from insufficient cleanup processing during file uploads |
| CVE-2026-104817 | MI misskey misskey-dev | 8.7 | Oct 13 | Misskey: Lack of rate limiting and size restrictions in RSS fetching API |
| CVE-2026-104816 | MI misskey misskey-dev | 8.5 | Oct 13 | Misskey: Cross-site scripting in RSS feed item links |
| CVE-2026-46714 | MI misskey misskey-dev | 5.1 | Aug 3 | Misskey: Denial of Service via Uncontrolled Recursion in Theme Compilation |
| CVE-2026-47746 | MI misskey misskey-dev | 8.9 | Aug 3 | Misskey: JSON-LD signature validation + compaction is vulnerable to timing attacks |
| CVE-2026-46713 | MI misskey misskey-dev | 9.2 | Aug 3 | Misskey: JSON-LD signature validation + compaction may lead to improper activity handling |
| CVE-2026-46712 | MI misskey misskey-dev | 2.3 | Aug 3 | Misskey: Lack of proper permission checks in Direct Messaging feature |
| CVE-2026-48115 | MI misskey misskey-dev | 6.3 | Aug 3 | Misskey: Improper Authorization in the Announcements API |
| CVE-2026-57574 | MI misskey misskey-dev | 7.4 | Jul 10 | Misskey: TOTP tokens can be reused |
| CVE-2026-57575 | MI misskey misskey-dev | 6.9 | Jul 10 | Misskey: SSRF bypass in URL Preview |
| CVE-2026-28433 | MI misskey misskey-dev | 4.3 | Mar 9 | Misskey lacks resource ownership validation |
| CVE-2026-28432 | MI misskey misskey-dev | 7.5 | Mar 9 | HTTP signature verification can be bypassed |
| CVE-2026-28431 | MI misskey misskey-dev | 7.5 | Mar 9 | Misskey lacks proper authorization checks and input validation |
| CVE-2024-49363 | MI misskey misskey-dev | 7.4 | Dec 18 | Uncontrolled Recursion and Asymmetric Resource Consumption (Amplification) in media/file proxy in Misskey |
| CVE-2024-52579 | MI misskey misskey-dev | 5.4 | Dec 18 | Server-Side Request Forgery vulnerability in various APIs in Misskey |
| CVE-2024-52590 | MI misskey misskey-dev | 6.5 | Dec 18 | Missing validation allows spoofed profiles in Misskey |
| CVE-2024-52591 | MI misskey misskey-dev | 9.3 | Dec 18 | Missing validation allows spoofed profiles and notes in Misskey |
| CVE-2024-52592 | MI misskey misskey-dev | 5.3 | Dec 18 | Missing validation allows spoofed poll updates in Misskey |
| CVE-2024-52593 | MI misskey misskey-dev | 5.3 | Dec 18 | Missing validation allows spoofed "origin" links in Misskey |