| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2023-49079 | Misskey's missing signature validation allows arbitrary users to impersonate any remote user. | misskey-dev | misskey | Critical | 9.3 | 2023-11-29 18:56:17 | Deep Dive |
| CVE-2023-43793 | Misskey allows users to bypass authentication of Bull dashboard | misskey-dev | misskey | High | 7.5 | 2023-10-04 20:21:29 | Deep Dive |
| CVE-2023-24810 | Cross site scripting (XSS) vulnerability using authentication callback in Misskey | misskey-dev | misskey | High | 7.1 | 2023-02-22 19:15:34 | Deep Dive |
| CVE-2023-24811 | Cross site scripting (XSS) vulnerability using url preview in Misskey | misskey-dev | misskey | High | 7.1 | 2023-02-22 19:13:30 | Deep Dive |
| CVE-2023-24812 | SQL injection of notes/search-by-tag | misskey-dev | misskey | High | 8.8 | 2023-02-22 19:10:16 | Deep Dive |
| CVE-2023-25154 | Cross site scripting (XSS) of ActivityPub URI in misskey | misskey-dev | misskey | High | 7.1 | 2023-02-22 19:00:26 | Deep Dive |
| CVE-2021-39195 | Server-Side Request Forgery vulnerability in misskey | misskey-dev | misskey | High | 7.7 | 2021-09-07 19:00:12 | Deep Dive |
| CVE-2021-39169 | XSS vulnerability using dialog | misskey-dev | misskey | High | 8.0 | 2021-08-27 12:40:09 | Deep Dive |