Vulnerabilities

TI-2024-18530 CVE-2024-27927 · GHSA-3p3p-cgj7-vgw3

RSSHub vulnerable to SSRF in /mastodon, /zjoi, and /m4

LOW 37

RSSHub is an open source RSS feed generator.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.01044 Published 2024-03-06 Fixed in 1.0.0-master.a429472 CWE-918

TI-2024-18529 CVE-2024-27926 · GHSA-2wqw-hr4f-xrhh

LOW 28

RSSHub is an open source RSS feed generator.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00521 Published 2024-03-06 Fixed in 1.0.0-master.d8ca915 CWE-79

TI-2023-11638 CVE-2023-26491 · GHSA-32gr-4cq6-5w5q

LOW 28

RSSHub is an open source and extensible RSS feed generator.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00434 Published 2023-03-03 Fixed in 1.0.0-master.c910c4d CWE-79

TI-2023-08742 CVE-2023-22493 · GHSA-64wp-jh9p-5cg2

HIGH 71

RSSHub is an open source RSS feed generator.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00807 Published 2023-01-13 Fixed in 1.0.0-master.a66cbcf CWE-918

TI-2022-13154 CVE-2022-31110 · GHSA-jvxx-v45p-v5vf

HIGH 72

RSSHub is an open source, extensible RSS feed generator.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01599 Published 2022-06-29 No fix listed CWE-400

TI-2021-04378 CVE-2021-21278 · GHSA-pgjj-866w-fc5c

MEDIUM 45

RSSHub is an open source, easy to use, and extensible RSS feed generator.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01604 Published 2021-01-26 Fixed in 7f1c430 CWE-74