miniflux.app
Go · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Unauthenticated Miniflux user can bypass allowed networks check to obtain Prometheus metrics | miniflux.app/v2miniflux.app | Go | High | Fix reported | |
| Open Redirect Bypass in miniflux-v2 | miniflux.app/v2miniflux.app | Go | Medium | Fix reported | |
| Miniflux Media Proxy SSRF via /proxy endpoint allows access to internal network resources | miniflux.app/v2miniflux.app | Go | Medium | Fix reported | |
| Miniflux has an Open Redirect via protocol-relative redirect_url | miniflux.app/v2miniflux.app | Go | Medium | Fix reported | |
| Miniflux Media Proxy vulnerable to Stored Cross-site Scripting due to improper Content-Security-Policy configuration | miniflux.app/v2miniflux.app | Go | Medium | Fix reported |