Vulnerabilities in LemmyNet

6 results

CVE-2024-23649HIGHAny authenticated user may obtain private message details from other users on the same instanceEPSS 0.5%CVE-2025-25194MEDIUMServer-Side Request Forgery (SSRF) in activitypub_federationEPSS 0.4%CVE-2026-33693MEDIUMLemmy's Activitypub-Federation has SSRF via 0.0.0.0 bypass in activitypub-federation-rust v4_is_invalid()EPSS 0.4%CVE-2026-29178HIGHLemmy: Unauthenticated SSRF via file_type query parameter injection in image endpointEPSS 0.3%CVE-2026-42181MEDIUMLemmy: SSRF and internal image disclosure in post link metadata via unvalidated og:imageEPSS 0.2%CVE-2026-42180MEDIUMLemmy: SSRF in /api/v3/post via Webmention dispatchEPSS 0.2%