misskey-dev misskey

Name: misskey-dev misskey
Brand: misskey-dev

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

4critical9high13medium0low

updated 2026-10-28

vulnerabilities (34)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-39195US	medium6.5	1.06% (64th)	—	no fix	2021-09-07	≤ < 12.90.0
CVE-2023-43793US	high7.5	0.84% (58th)	—	no fix	2023-10-04	≤ < 2023.9.0
CVE-2021-39169US	medium5.4	0.74% (54th)	—	no fix	2021-08-27	≤ < 12.51.0
CVE-2023-24812US	critical9.8	0.71% (53rd)	—	no fix	2023-02-22	≤ < 13.3.3
CVE-2024-25636US	high8.8	0.66% (51st)	—	no fix	2024-02-19	2 versions
CVE-2026-57575US	—	0.60% (49th)	—	no fix	2026-07-10	≤ < 2026.6.0
CVE-2025-24896US	high8.1	0.60% (49th)	—	2025.2.0-alpha.0	2025-02-11	12.109.0, → 2025.2.0-alpha.0
CVE-2026-57574US	—OT elevated	0.55% (46th)	—	no fix	2026-07-10	≤ < 2026.6.0
CVE-2023-52139US	critical9.6	0.55% (46th)	—	no fix	2023-12-29	2 versions
CVE-2025-46559US	high7.5	0.45% (39th)	—	2025.4.1	2025-05-05	12.31.0, → 2025.4.1
CVE-2023-24810US	medium6.1	0.45% (39th)	—	no fix	2023-02-22	≤ < 13.3.1
CVE-2026-46714US	—	0.45% (39th)	—	2026.5.4	2026-08-03	8.63.0, → 2026.5.4
CVE-2023-25154US	medium6.1	0.43% (37th)	—	no fix	2023-02-22	≤ < 13.5.0
CVE-2026-48115US	—	0.42% (36th)	—	2026.5.4	2026-08-03	2024.5.0, → 2026.5.4
CVE-2023-24811US	medium6.1	0.41% (35th)	—	no fix	2023-02-22	≤ < 13.3.2
CVE-2024-32983US	high7.5OT elevated	0.40% (34th)	—	no fix	2024-06-03	≤ < 2024.5.0
CVE-2023-49079US	high7.5	0.40% (34th)	—	no fix	2023-11-29	≤ < 2023.11.1-beta.1
CVE-2024-52593US	medium5.3	0.37% (31st)	—	2024.11.0-alpha.3	2024-12-18	12.29.0, → 2024.11.0-alpha.3
CVE-2026-46712US	—	0.36% (30th)	—	2026.5.4	2026-08-03	2025.3.2, → 2026.5.4
CVE-2024-52590US	medium6.5	0.35% (29th)	—	2024.11.0-alpha.3	2024-12-18	2024.8.0-rc.3, → 2024.11.0-alpha.3
CVE-2025-66482US	medium6.5OT elevated	0.34% (27th)	—	2025.12.0-alpha.2	2025-12-16	2025.9.1, → 2025.12.0-alpha.2
CVE-2024-49363US	—	0.32% (25th)	—	no fix	2024-12-18	≤ < CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H
CVE-2024-52591US	critical9.3	0.32% (24th)	—	no fix	2024-12-18	≤ < 2024.11.0-alpha.3
CVE-2025-66402US	medium6.5OT elevated	0.31% (24th)	—	2025.12.0	2025-12-16	13.0.0-beta.16, → 2025.12.0
CVE-2024-52592US	medium5.3	0.31% (23rd)	—	2024.11.0-alpha.3	2024-12-18	10.92.1, → 2024.11.0-alpha.3
CVE-2026-47746US	—	0.28% (21st)	—	2026.5.4	2026-08-03	12.37.0, → 2026.5.4
CVE-2026-46713US	—	0.28% (20th)	—	2026.5.4	2026-08-03	12.37.0, → 2026.5.4
CVE-2026-28431US	high7.5	0.26% (18th)	—	2026.3.1	2026-03-10	8.45.0, → 2026.3.1
CVE-2025-46340US	medium5.4	0.25% (17th)	—	2025.4.1	2025-05-05	12.0.0, → 2025.4.1
CVE-2026-28433US	medium4.3OT elevated	0.24% (14th)	—	2026.3.1	2026-03-10	10.93.0, → 2026.3.1
CVE-2024-52579US	medium5.4	0.22% (13th)	—	no fix	2024-12-18	≤ < 2024.11.0-alpha.3
CVE-2025-25306US	critical9.3	0.18% (8th)	—	no fix	2025-03-10	≤ < 2025.2.1
CVE-2026-28432US	high7.5	0.16% (5th)	—	no fix	2026-03-10	≤ < 2026.3.1
CVE-2025-24897US	high8.2	0.14% (3rd)	—	2025.2.0-alpha.0	2025-02-11	12.109.0, → 2025.2.0-alpha.0

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation6 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4 CVEs
CWE-285Improper Authorization3 CVEs
CWE-347Improper Verification of Cryptographic Signature3 CVEs
CWE-918Server-Side Request Forgery (SSRF)3 CVEs
CWE-639Authorization Bypass Through User-Controlled Key2 CVEs
CWE-674Uncontrolled Recursion2 CVEs
CWE-862Missing Authorization2 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)34 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan