miniflux.app vulnerabilities

CVEs whose affected-version data names the miniflux.app package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2023-27591High· 7.5

Unauthenticated Miniflux user can bypass allowed networks check to obtain Prometheus metrics

Unauthenticated Miniflux user can bypass allowed networks check to obtain Prometheus metrics

▾ Twilightv2 · miniflux.app/v2EPSS 0.76%via OSV

miniflux.app vulnerabilities (CVEs) · VulnSea