Misskey vulnerabilities
We track 2 vulnerabilities in Misskey products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 19, 2024.
2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score
Latest Misskey vulnerabilities
- 8.8 High severity
misskey: Unrestricted Upload of File with Dangerous Type
Misskey is an open source, decentralized social media platform with ActivityPub support. Prior to version 2024.2.0, when fetching remote Activity Streams objects, Misskey doesn't check that the response from the remote server has a `Content-Type` header value
- 7.5 High severity
misskey: Improper Authentication
Misskey is an open source, decentralized social media platform. Prior to version 2023.9.0, by editing the URL, a user can bypass the authentication of the Bull dashboard, which is the job queue management UI, and access it. Version 2023.9.0 contains a fix. The