Known vulnerabilities in Misskey - page 2

Software: Misskey
Software CPE: cpe:2.3:a:misskey_development_division:misskey:*:*:*:*:*:*:*:*
Total vulnerabilities: 46
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Misskey Misskey is affected by 46 known vulnerabilities: 11 high, 15 medium, 20 low Critical High Medium Low

Vulnerabilities (46)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU128341 - Improper Verification of Cryptographic Signature
CVE-2026-28432
CWE-347 Medium
No
No
2026.3.1 28.04.2026 SB2026042871
#VU128340 - Insecure Default Initialization of Resource
CVE-2025-66482
CWE-1188 Medium
No
No
2025.12.0 28.04.2026 SB2026042870
#VU128339 - Missing Authorization
CVE-2025-66402
CWE-862 Low
No
No
2025.12.0 28.04.2026 SB2026042870
#VU128338 - Improper input validation
CVE-2025-46340
CWE-20 Medium
No
No
2025.4.1 28.04.2026 SB2026042869
#VU128337 - Improper input validation
CVE-2025-46559
CWE-20 Low
No
No
2025.4.1 28.04.2026 SB2026042869
#VU106268 - Origin Validation Error
CVE-2025-25306
CWE-346 High
No
No
2025.2.1 31.03.2025 SB2025033121
#VU106266 - Improper input validation
CVE-2024-52591
CWE-20 High
No
No
2024.11.0 alpha.3 31.03.2025 SB2025033119
#VU128335 - Cross-Site Request Forgery (CSRF)
CVE-2025-24897
CWE-352 High
No
No
2025.2.0 11.02.2025 SB20250211176
#VU128336 - Insufficient Session Expiration
CVE-2025-24896
CWE-613 High
No
No
2025.2.0 11.02.2025 SB20250211176
#VU128334 - Server-Side Request Forgery (SSRF)
CVE-2024-52579
CWE-918 Low
No
No
2024.11.0 alpha.3 18.12.2024 SB2025033119
#VU128333 - Uncontrolled Recursion
CVE-2024-49363
CWE-674 Medium
No
No
2024.11.0 alpha.3 18.12.2024 SB2025033119
#VU128332 - Improper Access Control
CVE-2024-52592
CWE-284 Medium
No
No
2024.11.0 alpha.3 18.12.2024 SB2025033119
#VU128331 - Improper input validation
CVE-2024-52590
CWE-20 High
No
No
2024.11.0 alpha.3 18.12.2024 SB2025033119
#VU128330 - Improper input validation
CVE-2024-52593
CWE-20 Low
No
No
2024.11.0 alpha.3 18.12.2024 SB2025033119
#VU128329 - Improper input validation
CVE-2024-32983
CWE-20 High
No
No
2024.5.0 02.06.2024 SB2024060201
#VU128328 - Insufficient Verification of Data Authenticity
CVE-2024-25636
CWE-345 Low
No
No
2024.2.0 17.02.2024 SB2024021713
#VU84854 - Improper Access Control
CVE-2023-52139
CWE-284 Medium
No
No
2023.12.1 29.12.2023 SB2023122903
#VU128327 - Improper Verification of Cryptographic Signature
CVE-2023-49079
CWE-347 High
No
No
2023.11.1 25.11.2023 SB2023112511
#VU81415 - Improper Authentication
CVE-2023-43793
CWE-287 High
No
No
2023.9.0 03.10.2023 SB2023100312
#VU72518 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-24812
CWE-89 High
No
No
13.3.3 23.02.2023 SB2023022325


Showing elements 21 - 40 out of 46