nitter vulnerabilities

1 known vulnerability in nitter from Zedeus. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.6 High severity

  nitter: Server-Side Request Forgery

  CVE-2026-56285Jun 29, 2026Zedeus

  Nitter's /video media proxy endpoint fails to validate target URLs against Twitter/X domains and uses a hardcoded default HMAC key, allowing unauthenticated attackers to compute valid HMACs for arbitrary URLs. Attackers can retrieve HTTP responses from any hos