CyberSecBulletin

LemmyNet vulnerabilities

We track 1 vulnerability in LemmyNet products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 6, 2026.

1vulnerabilities
0critical
1high
0exploited
7.7average CVSS score

Latest LemmyNet vulnerabilities

  • 7.7 High severity

    lemmy: Server-Side Request Forgery

    CVE-2026-29178LemmyNet

    Lemmy, a link aggregator and forum for the fediverse, is vulnerable to server-side request forgery via a dependency on activitypub_federation, a framework for ActivityPub federation in Rust. Prior to version 0.19.16, the GET /api/v4/image/{filename} endpoint i