Mastodon
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 58 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from February 5, 2017 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Mastodon: SSRF Protection Bypass via IPv4-compatible IPv6 Addresses
Mastodon: Personally-identifying information disclosure due to incorrect access control validation
Mastodon: Exhausting data by an unauthenticated request to the admin retention API
Mastodon: Persistent anonymous DoS via unhandled NoMethodError in MATH_TRANSFORMER
Mastodon: Spoofing of attribution domains
Mastodon: Removal of integrity-protected JSON entries from signed activities
Mastodon: SSRF protection bypass on older Ruby versions
Mastodon: LD-Signature Bypass via JSON-LD Named-Graph Restructuring
Mastodon: SSRF Bypass via IPv6 Unspecified Address (::)
Monitor Mastodon in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.