Known vulnerabilities in Misskey - page 2

Software: Misskey
Software CPE: cpe:2.3:a:misskey_development_division:misskey:*:*:*:*:*:*:*:*
Total vulnerabilities: 46
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Misskey Misskey is affected by 46 known vulnerabilities: 11 high, 15 medium, 20 low Critical High Medium Low

Vulnerabilities (46)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU128340 - Insecure Default Initialization of Resource
CVE-2025-66482
CWE-1188 Medium
No
No
2025.12.0 28.04.2026 SB2026042870
#VU128339 - Missing Authorization
CVE-2025-66402
CWE-862 Low
No
No
2025.12.0 28.04.2026 SB2026042870
#VU128338 - Improper input validation
CVE-2025-46340
CWE-20 Medium
No
No
2025.4.1 28.04.2026 SB2026042869
#VU128337 - Improper input validation
CVE-2025-46559
CWE-20 Low
No
No
2025.4.1 28.04.2026 SB2026042869
#VU106268 - Origin Validation Error
CVE-2025-25306
CWE-346 High
No
No
2025.2.1 31.03.2025 SB2025033121
#VU106266 - Improper input validation
CVE-2024-52591
CWE-20 High
No
No
2024.11.0 alpha.3 31.03.2025 SB2025033119
#VU128334 - Server-Side Request Forgery (SSRF)
CVE-2024-52579
CWE-918 Low
No
No
2024.11.0 alpha.3 18.12.2024 SB2025033119
#VU128333 - Uncontrolled Recursion
CVE-2024-49363
CWE-674 Medium
No
No
2024.11.0 alpha.3 18.12.2024 SB2025033119
#VU128332 - Improper Access Control
CVE-2024-52592
CWE-284 Medium
No
No
2024.11.0 alpha.3 18.12.2024 SB2025033119
#VU128331 - Improper input validation
CVE-2024-52590
CWE-20 High
No
No
2024.11.0 alpha.3 18.12.2024 SB2025033119
#VU128330 - Improper input validation
CVE-2024-52593
CWE-20 Low
No
No
2024.11.0 alpha.3 18.12.2024 SB2025033119
#VU128329 - Improper input validation
CVE-2024-32983
CWE-20 High
No
No
2024.5.0 02.06.2024 SB2024060201
#VU128328 - Insufficient Verification of Data Authenticity
CVE-2024-25636
CWE-345 Low
No
No
2024.2.0 17.02.2024 SB2024021713
#VU84854 - Improper Access Control
CVE-2023-52139
CWE-284 Medium
No
No
2023.12.1 29.12.2023 SB2023122903
#VU81415 - Improper Authentication
CVE-2023-43793
CWE-287 High
No
No
2023.9.0 03.10.2023 SB2023100312
#VU72518 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-24812
CWE-89 High
No
No
13.3.3 23.02.2023 SB2023022325
#VU72517 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-25154
CWE-79 Low
No
No
13.5.0 23.02.2023 SB2023022324
#VU72516 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-24811
CWE-79 Low
No
No
13.3.2 23.02.2023 SB2023022323
#VU72515 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-24810
CWE-79 Low
No
No
13.3.1 23.02.2023 SB2023022322
#VU128326 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-1020010
CWE-79 Medium
No
No
11.20.2 10.06.2019 SB2019061017


Showing elements 21 - 40 out of 46