Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Vendor: miniflux Clear all filters
TI-2026-70714 CVE-2026-108735 · GHSA-f5cv-wgfv-h2x2

Server-side request forgery in Miniflux via per-feed proxy URL

Priority MEDIUM 57

Miniflux 2.3.0 through 2.3.3 contains a server-side request forgery vulnerability that allows authenticated users to reach internal addresses by setting a feed's proxy_url.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00269 Published 2026-10-11 No fix listed CWE-918
TI-2026-39867 CVE-2026-55185 · GHSA-m999-j542-5w3r

Miniflux 2: Open Redirect Bypass

Priority MEDIUM 56

Miniflux 2 is an open source feed reader.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00559 Published 2026-08-21 Fixed in 2.3.1 CWE-601