Misskey
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 34 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from July 29, 2019 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Misskey: Denial of service resulting from insufficient cleanup processing during file uploads
Misskey: Lack of rate limiting and size restrictions in RSS fetching API
Misskey: Cross-site scripting in RSS feed item links
Misskey: JSON-LD signature validation + compaction is vulnerable to timing attacks
Misskey: JSON-LD signature validation + compaction may lead to improper activity handling
Misskey lacks resource ownership validation
HTTP signature verification can be bypassed
Misskey lacks proper authorization checks and input validation
Misskey has a login rate limit bypass via spoofed X-Forwarded-For header
misskey.js's export data contains private post data
Monitor Misskey in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.