pixelfed/pixelfed
Composer · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Pixelfed doesn't check OAuth Scopes in API routes, giving elevated permissions | pixelfed/pixelfed | Composer | Critical | Fix reported | |
| Pixelfed may allow unauthorized actor to view private posts and private users | pixelfed/pixelfed | Composer | Medium | Fix reported | |
| Pixelfed may allow unauthorized actor to view private posts | pixelfed/pixelfed | Composer | Medium | No fix reported | |
| Pixelfed allows user enumeration via reset password functionality | pixelfed/pixelfed | Composer | Medium | No fix reported |