Advisories · Technology
Pixelfed.
Every CVE that names Pixelfed among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Pixelfed OAuth Scope ApiV1Controller.php instancePeers missing authentication
- Pixelfed
- Authentication bypass
- CVSS 5.3 Medium
Pixelfed through 0.12.9 Unauthorized Story Access via API
- pixelfed
- Broken access control
- CVSS 4.3 Medium
Pixelfed - Authenticated SSRF via Remote URL Search
- pixelfed
- Server-side request forgery (SSRF)