Vulnerabilities

TI-2026-17586 CVE-2026-21885 · GHSA-xwh2-742g-w3wp

Miniflux Media Proxy SSRF via /proxy endpoint allows access to internal network resources

MEDIUM 62

Miniflux 2 is an open source feed reader.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.003 Published 2026-01-08 Fixed in 2.2.16 CWE-918

TI-2025-41410 CVE-2025-67713 · GHSA-wqv2-4wpg-8hc9

MEDIUM 57

Miniflux 2 is an open source feed reader.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00221 Published 2025-12-11 Fixed in 2.2.15 CWE-601

TI-2023-12301 CVE-2023-27591 · GHSA-3qjf-qh38-x73v

MEDIUM 40

Miniflux is a feed reader.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00755 Published 2023-03-17 Fixed in 2.0.43 CWE-1220

TI-2023-12302 CVE-2023-27592 · GHSA-mqqg-xjhj-wfgw

LOW 25

Miniflux is a feed reader.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00586 Published 2023-03-17 Fixed in 2.0.43 CWE-79