CVE Tools
Track your stack

Misskey-dev

10 CVEs tracked since 2023. Since Feb 2023, none of them reached CISA KEV.

Misskey-dev CVEs per month

Feb 2023 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Misskey-dev CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2023-0240
2023-03no snapshot
2023-043 or fewer
2023-053 or fewer
2023-064 or fewer
2023-073 or fewer
2023-084 or fewer
2023-093 or fewer
2023-104 or fewer
2023-114 or fewer
2023-124 or fewer
2024-014 or fewer
2024-024 or fewer
2024-034 or fewer
2024-044 or fewer
2024-055 or fewer
2024-064 or fewer
2024-074 or fewer
2024-084 or fewer
2024-093 or fewer
2024-104 or fewer
2024-114 or fewer
2024-1260
2025-014 or fewer
2025-023 or fewer
2025-035 or fewer
2025-044 or fewer
2025-054 or fewer
2025-064 or fewer
2025-075 or fewer
2025-084 or fewer
2025-094 or fewer
2025-104 or fewer
2025-114 or fewer
2025-125 or fewer
2026-015 or fewer
2026-025 or fewer
2026-037 or fewer
2026-046 or fewer
2026-057 or fewer
2026-067 or fewer
2026-077 or fewer
2026-088 or fewer
2026-099 or fewer
2026-106 or fewer

Products

The products that kept showing up in Misskey-dev's monthly top three, with their CVEs summed over those months.

  1. Misskey102 months

Latest CVEs

The 15 most recently published vulnerabilities affecting Misskey-dev.

  1. CVE-2026-103937Misskey: Denial of service resulting from insufficient cleanup processing during file uploads—
  2. CVE-2026-104817Misskey: Lack of rate limiting and size restrictions in RSS fetching API—
  3. CVE-2026-104816Misskey: Cross-site scripting in RSS feed item links—
  4. CVE-2026-46714Misskey: Denial of Service via Uncontrolled Recursion in Theme Compilation—
  5. CVE-2026-47746Misskey: JSON-LD signature validation + compaction is vulnerable to timing attacks—
  6. CVE-2026-46713Misskey: JSON-LD signature validation + compaction may lead to improper activity handling—
  7. CVE-2026-46712Misskey: Lack of proper permission checks in Direct Messaging feature—
  8. CVE-2026-48115Misskey: Improper Authorization in the Announcements API—
  9. CVE-2026-57574Misskey: TOTP tokens can be reused—
  10. CVE-2026-57575Misskey: SSRF bypass in URL Preview—
  11. CVE-2026-28433Misskey lacks resource ownership validation4.3
  12. CVE-2026-28432HTTP signature verification can be bypassed7.5
  13. CVE-2026-28431Misskey lacks proper authorization checks and input validation7.5
  14. CVE-2025-66482Misskey has a login rate limit bypass via spoofed X-Forwarded-For header6.5
  15. CVE-2025-66402misskey.js's export data contains private post data6.5

The record

Peak rank
#109 in Dec 2024
Busiest month shown
Dec 2024, 6 CVEs
Months with a KEV entry
0 since Feb 2023
Monthly snapshots
2 since 2023
Misskey-dev's full record, month by month