Vulnerabilities

TI-2025-18653 CVE-2025-24973

Concorde not removing authentication tokens after logging out

MEDIUM 42

Concorde, formerly know as Nexkey, is a fork of the federated microblogging platform Misskey.

CVSS 3.1CRITICAL 9.4 Local No auth No interaction EPSS 0.00188 Published 2025-02-11 Fixed in 12.25Q1.1 CWE-613

TI-2025-18602 CVE-2025-24900

MEDIUM 43

Concorde, formerly know as Nexkey, is a fork of the federated microblogging platform Misskey.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00404 Published 2025-02-11 Fixed in 12.25Q1.1 CWE-352

TI-2024-37170 CVE-2024-56200

MEDIUM 44

Altair is a fork of Misskey v12.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00616 Published 2024-12-19 Fixed in v12.24Q4.1 CWE-400

TI-2023-28521 CVE-2023-52077

MEDIUM 43

Nexkey is a lightweight fork of Misskey v12 optimized for small to medium size servers.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00693 Published 2023-12-27 Fixed in 12.23Q4.5 CWE-863

TI-2023-26760 CVE-2023-49095

MEDIUM 44

nexkey is a microblogging platform.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00565 Published 2023-11-30 Fixed in 12.122.2 CWE-20

TI-2023-23496 CVE-2023-43805

MEDIUM 40

Nexkey is a fork of Misskey, an open source, decentralized social media platform.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00795 Published 2023-10-04 Fixed in 12.121.9 CWE-287