Misskey
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 31 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from July 29, 2019 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Misskey: JSON-LD signature validation + compaction is vulnerable to timing attacks
Misskey: JSON-LD signature validation + compaction may lead to improper activity handling
Misskey lacks resource ownership validation
HTTP signature verification can be bypassed
Misskey lacks proper authorization checks and input validation
Misskey has a login rate limit bypass via spoofed X-Forwarded-For header
misskey.js's export data contains private post data
Misskey Directory Traversal Vulnerability in AiScript via `Mk:api`
Misskey CSS Style Injection Vulnerability In `MkUrlPreview`
@misskey-dev/summaly Redirect Filter Bypass
Monitor Misskey in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.