concorde vulnerabilities

2 known vulnerabilities in concorde from Nexryai. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.3 Critical severity

  Concorde, formerly know as Nexkey, is a fork of the federated microblogging platform Misskey.

  CVE-2025-24973Feb 11, 2025Nexryai

  Concorde, formerly know as Nexkey, is a fork of the federated microblogging platform Misskey. Prior to version 12.25Q1.1, due to an improper implementation of the logout process, authentication credentials remain in cookies even after a user has explicitly log

• 8.6 High severity

  concorde: Cross-Site Request Forgery

  CVE-2025-24900Feb 11, 2025Nexryai

  Concorde, formerly know as Nexkey, is a fork of the federated microblogging platform Misskey. Due to a lack of CSRF countermeasures and improper settings of cookies for MediaProxy authentication, there is a vulnerability that allows MediaProxy authentication t