Vulnerabilities in miniflux

7 results

CVE-2023-27591HIGHUnauthenticated Miniflux user can bypass allowed networks check to obtain Prometheus metricsEPSS 0.8%CVE-2023-27592MEDIUMStored XSS in Miniflux when opening a broken image due to unescaped ServerError in proxy handlerEPSS 0.6%CVE-2026-55185MEDIUMMiniflux 2: Open Redirect BypassEPSS 0.6%CVE-2025-31483MEDIUMStored XSS in Miniflux Media Proxy due to improper Content-Security-Policy configurationEPSS 0.4%CVE-2026-21885MEDIUMMiniflux Media Proxy SSRF via /proxy endpoint allows access to internal network resourcesEPSS 0.3%CVE-2026-108735MEDIUMMiniflux 2.3.0 through 2.3.3 SSRF via Per-Feed Proxy URLEPSS 0.3%CVE-2025-67713MEDIUMMiniflux 2 has an Open Redirect via protocol-relative `redirect_url`EPSS 0.2%