miniflux vulnerabilities
Every vulnerability this feed holds for miniflux, merged from five public registers and ordered by what warrants attention first — exploited in the wild, then CVSS, then recency.
2 vulnerabilities tracked.
- 6.0 Miniflux before 2.3.5 contains an unverified password change vulnerability that allows holders of a signed-in session to change the account…
- 2.3 Miniflux before 2.3.5 contains an insufficient session expiration vulnerability that allows attackers to retain account access because…
What this covers
This feed accumulates forward from the day it started storing records, and a name search that finds nothing here is also looked up against the registers directly — so an older advisory resolves even when it predates the corpus. It is still a reading view, not a substitute for the vendor's own advisory, and absence from this page is not a statement that miniflux is free of vulnerabilities.
Query this from an agent over MCP · Check a lockfile by version
Other vendors tracked here
Microsoft Linux Red Hat Google n/a Apple Apache Software Foundation Oracle Corporation zephyrproject Unknown FFMPEG Fortinet Adobe OpenEMR IBM Drupal SAP_SE Cisco n8n-io Eclipse Foundation erlang AMD Grafana Dell