misskey vulnerabilities
CVEs whose affected-version data names the misskey package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2025-66482Medium· 6.5Misskey is an open source, federated social media platform
Misskey is an open source, federated social media platform. Attackers who use an untrusted reverse proxy or not using a reverse proxy at all can bypass IP rate limiting by adding a forged X-Forwarded-For header. Starting with version 202…
▾ Sunlitmisskey · misskeyEPSS 0.34%via NVD
CVE-2025-66402Medium· 6.5Misskey is an open source, federated social media platform
Misskey is an open source, federated social media platform. Starting in version 13.0.0-beta.16 and prior to version 2025.12.0, an actor who does not have permission to view favorites or clips can can export the posts and view the content…
▾ Sunlitmisskey · misskeyEPSS 0.31%via NVD