agentprime: misskeyEvery new CVE for misskey.https://agentprime.io/CVE-2026-103937: Misskey: Denial of service resulting from insufficient cleanup processing during file uploadshttps://agentprime.io/advisories/CVE-2026-103937/https://agentprime.io/advisories/CVE-2026-103937/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 18:42:17 GMTCVECVE-2026-104817: Misskey: Lack of rate limiting and size restrictions in RSS fetching APIhttps://agentprime.io/advisories/CVE-2026-104817/https://agentprime.io/advisories/CVE-2026-104817/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 18:39:30 GMTCVECVE-2026-104816: Misskey: Cross-site scripting in RSS feed item linkshttps://agentprime.io/advisories/CVE-2026-104816/https://agentprime.io/advisories/CVE-2026-104816/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 18:38:06 GMTCVECVE-2026-46714: Misskey: Denial of Service via Uncontrolled Recursion in Theme Compilationhttps://agentprime.io/advisories/CVE-2026-46714/https://agentprime.io/advisories/CVE-2026-46714/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 21:58:36 GMTCVECVE-2026-47746: Misskey: JSON-LD signature validation + compaction is vulnerable to timing attackshttps://agentprime.io/advisories/CVE-2026-47746/https://agentprime.io/advisories/CVE-2026-47746/CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 21:56:40 GMTCVECVE-2026-46713: Misskey: JSON-LD signature validation + compaction may lead to improper activity handlinghttps://agentprime.io/advisories/CVE-2026-46713/https://agentprime.io/advisories/CVE-2026-46713/CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 21:37:45 GMTCVEcriticalCVE-2026-46712: Misskey: Lack of proper permission checks in Direct Messaging featurehttps://agentprime.io/advisories/CVE-2026-46712/https://agentprime.io/advisories/CVE-2026-46712/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 21:29:49 GMTCVECVE-2026-48115: Misskey: Improper Authorization in the Announcements APIhttps://agentprime.io/advisories/CVE-2026-48115/https://agentprime.io/advisories/CVE-2026-48115/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 21:21:59 GMTCVECVE-2026-57574: Misskey: TOTP tokens can be reusedhttps://agentprime.io/advisories/CVE-2026-57574/https://agentprime.io/advisories/CVE-2026-57574/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Jul 2026 20:55:49 GMTCVECVE-2026-57575: Misskey: SSRF bypass in URL Previewhttps://agentprime.io/advisories/CVE-2026-57575/https://agentprime.io/advisories/CVE-2026-57575/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Jul 2026 20:54:33 GMTCVECVE-2026-28433: Misskey lacks resource ownership validationhttps://agentprime.io/advisories/CVE-2026-28433/https://agentprime.io/advisories/CVE-2026-28433/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 09 Mar 2026 21:21:06 GMTCVECVE-2026-28432: HTTP signature verification can be bypassedhttps://agentprime.io/advisories/CVE-2026-28432/https://agentprime.io/advisories/CVE-2026-28432/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 09 Mar 2026 21:19:43 GMTCVECVE-2026-28431: Misskey lacks proper authorization checks and input validationhttps://agentprime.io/advisories/CVE-2026-28431/https://agentprime.io/advisories/CVE-2026-28431/CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 09 Mar 2026 21:17:32 GMTCVEcriticalCVE-2025-46559: Misskey Directory Traversal Vulnerability in AiScript via `Mk:api`https://agentprime.io/advisories/CVE-2025-46559/https://agentprime.io/advisories/CVE-2025-46559/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 May 2025 18:38:36 GMTCVECVE-2025-46340: Misskey CSS Style Injection Vulnerability In `MkUrlPreview`https://agentprime.io/advisories/CVE-2025-46340/https://agentprime.io/advisories/CVE-2025-46340/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 May 2025 18:35:37 GMTCVECVE-2025-25306: Misskey's Incomplete Patch of CVE-2024-52591 Leads to Forgery of Federated Noteshttps://agentprime.io/advisories/CVE-2025-25306/https://agentprime.io/advisories/CVE-2025-25306/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Mar 2025 18:13:45 GMTCVEcriticalCVE-2025-24897: Misskey CSRF vulnerability due to insecure configuration of authentication cookie attributeshttps://agentprime.io/advisories/CVE-2025-24897/https://agentprime.io/advisories/CVE-2025-24897/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Feb 2025 15:20:29 GMTCVECVE-2025-24896: Misskey allows token to remain valid in cookie after signing outhttps://agentprime.io/advisories/CVE-2025-24896/https://agentprime.io/advisories/CVE-2025-24896/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Feb 2025 15:14:09 GMTCVECVE-2024-49363: Uncontrolled Recursion and Asymmetric Resource Consumption (Amplification) in media/file proxy in Misskeyhttps://agentprime.io/advisories/CVE-2024-49363/https://agentprime.io/advisories/CVE-2024-49363/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 18 Dec 2024 19:24:34 GMTCVECVE-2024-52579: Server-Side Request Forgery vulnerability in various APIs in Misskeyhttps://agentprime.io/advisories/CVE-2024-52579/https://agentprime.io/advisories/CVE-2024-52579/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 18 Dec 2024 19:22:31 GMTCVECVE-2024-52590: Missing validation allows spoofed profiles in Misskeyhttps://agentprime.io/advisories/CVE-2024-52590/https://agentprime.io/advisories/CVE-2024-52590/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 18 Dec 2024 19:21:32 GMTCVECVE-2024-52591: Missing validation allows spoofed profiles and notes in Misskeyhttps://agentprime.io/advisories/CVE-2024-52591/https://agentprime.io/advisories/CVE-2024-52591/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 18 Dec 2024 19:20:31 GMTCVECVE-2024-52592: Missing validation allows spoofed poll updates in Misskeyhttps://agentprime.io/advisories/CVE-2024-52592/https://agentprime.io/advisories/CVE-2024-52592/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 18 Dec 2024 19:19:17 GMTCVECVE-2024-52593: Missing validation allows spoofed "origin" links in Misskeyhttps://agentprime.io/advisories/CVE-2024-52593/https://agentprime.io/advisories/CVE-2024-52593/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 18 Dec 2024 19:17:49 GMTCVECVE-2024-32983: Misskey allows the impersonation and takeover of remote accounts with unnormalized signed activitieshttps://agentprime.io/advisories/CVE-2024-32983/https://agentprime.io/advisories/CVE-2024-32983/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Jun 2024 15:16:26 GMTCVECVE-2024-25636: Lack of media type verification of Activity Streams objects allows impersonation and takeover of remote accountshttps://agentprime.io/advisories/CVE-2024-25636/https://agentprime.io/advisories/CVE-2024-25636/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Feb 2024 19:42:20 GMTCVECVE-2023-52139: Misskey vulnerable to improper authorization when accessing with third-party applicationhttps://agentprime.io/advisories/CVE-2023-52139/https://agentprime.io/advisories/CVE-2023-52139/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 Dec 2023 17:21:01 GMTCVEcriticalCVE-2023-49079: Misskey's missing signature validation allows arbitrary users to impersonate any remote user.https://agentprime.io/advisories/CVE-2023-49079/https://agentprime.io/advisories/CVE-2023-49079/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Nov 2023 18:56:17 GMTCVEcriticalCVE-2023-43793: Misskey allows users to bypass authentication of Bull dashboardhttps://agentprime.io/advisories/CVE-2023-43793/https://agentprime.io/advisories/CVE-2023-43793/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Oct 2023 20:21:29 GMTCVECVE-2023-24810: Cross site scripting (XSS) vulnerability using authentication callback in Misskeyhttps://agentprime.io/advisories/CVE-2023-24810/https://agentprime.io/advisories/CVE-2023-24810/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Feb 2023 19:15:34 GMTCVECVE-2023-24811: Cross site scripting (XSS) vulnerability using url preview in Misskeyhttps://agentprime.io/advisories/CVE-2023-24811/https://agentprime.io/advisories/CVE-2023-24811/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Feb 2023 19:13:29 GMTCVECVE-2023-24812: SQL injection of notes/search-by-taghttps://agentprime.io/advisories/CVE-2023-24812/https://agentprime.io/advisories/CVE-2023-24812/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Feb 2023 19:10:16 GMTCVECVE-2023-25154: Cross site scripting (XSS) of ActivityPub URI in misskeyhttps://agentprime.io/advisories/CVE-2023-25154/https://agentprime.io/advisories/CVE-2023-25154/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Feb 2023 19:00:25 GMTCVECVE-2021-39195: Server-Side Request Forgery vulnerability in misskeyhttps://agentprime.io/advisories/CVE-2021-39195/https://agentprime.io/advisories/CVE-2021-39195/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Sep 2021 19:00:12 GMTCVECVE-2021-39169: XSS vulnerability using dialoghttps://agentprime.io/advisories/CVE-2021-39169/https://agentprime.io/advisories/CVE-2021-39169/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Aug 2021 12:40:09 GMTCVECVE-2019-1020010: Misskey before 10.102.4 allows hijacking a user's token.https://agentprime.io/advisories/CVE-2019-1020010/https://agentprime.io/advisories/CVE-2019-1020010/Published by the CVE Program. Not analysed by agentprime yet.Mon, 29 Jul 2019 12:12:04 GMTCVE