Known vulnerabilities in Misskey

Software: Misskey
Software CPE: cpe:2.3:a:misskey_development_division:misskey:*:*:*:*:*:*:*:*
Total vulnerabilities: 46
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Misskey Misskey is affected by 46 known vulnerabilities: 11 high, 15 medium, 20 low Critical High Medium Low

Vulnerabilities (46)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU150218 - Improper Control of Resource Identifiers ('Resource Injection')
CWE-99 Medium
No
No
2026.9.0 16.09.2026 SB2026091653
#VU150215 - Heap-based Buffer Overflow
CWE-122 High
No
No
2026.9.0 16.09.2026 SB2026091653
#VU150210 - Improper Link Resolution Before File Access ('Link Following')
CWE-59 Low
No
No
2026.9.0 16.09.2026 SB2026091653
#VU150197 - Missing Authorization
CWE-862 Medium
No
No
2026.9.0 16.09.2026 SB2026091653
#VU150180 - Exposure of Sensitive Information Through Metadata
CWE-1230 Medium
No
No
2026.9.0 16.09.2026 SB2026091653
#VU150177 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
2026.9.0 16.09.2026 SB2026091653
#VU150175 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-22 Low
No
No
2026.9.0 16.09.2026 SB2026091653
#VU145033 - Asymmetric Resource Consumption (Amplification)
CWE-405 Medium
No
No
2026.7.0 25.08.2026 SB2026082522
#VU145004 - Incomplete cleanup
CWE-459 Medium
No
No
2026.7.0 25.08.2026 SB2026082522
#VU145003 - Improper Privilege Management
CWE-269 Low
No
No
2026.7.0 25.08.2026 SB2026082522
#VU145002 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
2026.7.0 25.08.2026 SB2026082522
#VU136830 - Authentication Bypass by Capture-replay
CVE-2026-57574
CWE-294 High
No
No
2026.6.0 03.07.2026 SB2026070303
#VU136829 - Server-Side Request Forgery (SSRF)
CVE-2026-57575
CWE-918 Medium
No
No
2026.6.0 03.07.2026 SB2026070303
#VU132178 - Authorization Bypass Through User-Controlled Key
CVE-2026-46712
CWE-639 Low
No
No
2026.5.4 23.05.2026 SB2026052303
#VU132177 - Improper Verification of Cryptographic Signature
CVE-2026-46713
CWE-347 Medium
No
No
2026.5.4 23.05.2026 SB2026052303
#VU132176 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-47746
CWE-367 Medium
No
No
2026.5.4 23.05.2026 SB2026052303
#VU132175 - Uncontrolled Recursion
CVE-2026-46714
CWE-674 Low
No
No
2026.5.4 23.05.2026 SB2026052303
#VU132174 - Improper Authorization
CVE-2026-48115
CWE-285 Low
No
No
2026.5.4 23.05.2026 SB2026052303
#VU128343 - Authorization Bypass Through User-Controlled Key
CVE-2026-28431
CWE-639 Low
No
No
2026.3.1 28.04.2026 SB2026042871
#VU128342 - Authorization Bypass Through User-Controlled Key
CVE-2026-28433
CWE-639 Low
No
No
2026.3.1 28.04.2026 SB2026042871


Showing elements 1 - 20 out of 46