Vulnerabilities in Pixelfed

4 results

CVE-2024-25108CRITICALInsufficient authorization allowing elevated access to resources in pixelfedEPSS 0.7%CVE-2023-0901MEDIUMExposure of Sensitive Information to an Unauthorized Actor in pixelfed/pixelfedEPSS 0.6%CVE-2023-0914MEDIUMImproper Authorization in pixelfed/pixelfedEPSS 0.5%CVE-2025-30741MEDIUMPixelfed before 0.12.5 allows anyone to follow private accounts and see private posts on other Fediverse servers. This affects users elsewheEPSS 0.3%