Where
-Infinity
0

Trending

Last week
Last month
Last year

oss-secAnthropic's coordinated vulnerability disclosudashboard

First published (updated )
https://seclists.org/oss-sec/2026/q2/677

Joinmastodon MastodonMastodon may allow unconfirmed FASP to make subscriptions

Risk 38
Severity
8.2
EPSS
0.05%
First published (updated )
CVE-2026-27468

Joinmastodon MastodonMastodon has insufficient access control to push notification settings

Risk 28
Severity
6.5
EPSS
0.03%
First published (updated )
CVE-2026-23964

Joinmastodon MastodonMastodon missing length limits on list names, filter names, and filter keywords

Risk 27
Severity
6.5
EPSS
0.05%
First published (updated )
CVE-2026-23963

MastodonMastodon vulnerable to Denial of Service from a single post (client/server)

Risk 31
Severity
7.5
EPSS
0.02%
First published (updated )
CVE-2026-23962
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Joinmastodon MastodonMastodon may allow a remote suspension bypass

Risk 19
Severity
5.3
EPSS
0.05%
First published (updated )
CVE-2026-23961

MastodonLocal Mastodon users can enumerate and access severed relationships of every other local user

Risk 27
Severity
6.5
EPSS
0.03%
First published (updated )
CVE-2026-22246

Mastodon Mastodon 4.1Reached end of life

EOL
Apr 8, 2025
First published (updated )
latest-version-mastodon-4.1

Mastodon Mastodon 4.1Reached end of life

EOL
Apr 8, 2025
First published (updated )
EOL-mastodon-4.1

Joinmastodon MastodonXSS

Risk 43
Severity
7.5
First published (updated )
CVE-2023-49952
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Joinmastodon MastodonIn Mastodon 4.1.6, API endpoint rate limiting can be bypassed by setting a crafted HTTP request head…

Risk 42
Severity
5.9
First published (updated )
CVE-2024-34535

Joinmastodon MastodonMastodon has improper authorship check on audience extension for existing posts

Risk 54
Severity
8.2
First published (updated )
CVE-2024-37903

The RegisterCritical vulnerability in Mastodon is pounced upon by fast-acting admins

First published (updated )
News
The Register

CVE-2024-23832: Mastodon: Remote user impersonation and takeover

First published (updated )
https://seclists.org/oss-sec/2024/q1/92

Joinmastodon MastodonMastodon vulnerable to Stored XSS through the translation feature

Risk 38
Severity
6.1
First published (updated )
CVE-2023-42452
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Joinmastodon MastodonMastodon Invalid Domain Name Normalization vulnerability

Risk 43
Severity
7.5
First published (updated )
CVE-2023-42451

Joinmastodon MastodonMastodon Server-Side Request Forgery vulnerability

Risk 43
Severity
7.5
First published (updated )
CVE-2023-42450

Joinmastodon MastodonMastodon's blind LDAP injection in login allows the attacker to leak arbitrary attributes from LDAP database

Risk 44
Severity
7.7
First published (updated )
CVE-2023-28853

Joinmastodon MastodonThe undo_mark_statuses_as_sensitive method in app/services/approve_appeal_service.rb in Mastodon 3.5…

Risk 22
Severity
4.3
First published (updated )
CVE-2022-48364

Joinmastodon MastodonMastodon through 4.0.2 allows attackers to cause a denial of service (large Sidekiq pull queue) by c…

Risk 43
Severity
7.5
First published (updated )
CVE-2022-46405
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Joinmastodon MastodonImproper Restriction of Excessive Authentication Attempts in mastodon/mastodon

Risk 86
Severity
9.8
First published (updated )
CVE-2022-2166

Mastodon Mastodon 4.0Reached end of life

EOL
Oct 31, 2023
First published (updated )
latest-version-mastodon-4.0

Mastodon Mastodon 4.0Reached end of life

EOL
Oct 31, 2023
First published (updated )
EOL-mastodon-4.0

Joinmastodon Mastodonapp/models/user.rb in Mastodon before 3.5.0 allows a bypass of e-mail restrictions.

Risk 27
Severity
5.3
First published (updated )
CVE-2022-31263

Mastodon Mastodon 3.5Reached end of life

EOL
Dec 31, 2023
First published (updated )
latest-version-mastodon-3.5
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Mastodon Mastodon 3.5Reached end of life

EOL
Dec 31, 2023
First published (updated )
EOL-mastodon-3.5

Joinmastodon MastodonMastodon before 3.3.2 and 3.4.x before 3.4.6 has incorrect access control because it does not compac…

Risk 86
Severity
9.8
First published (updated )
CVE-2022-24307

Joinmastodon MastodonPrototype Pollution in mastodon/mastodon

Risk 42
Severity
7.4
First published (updated )
CVE-2022-0432

Mastodon Mastodon 3.4Reached end of life

EOL
Nov 6, 2022
First published (updated )
latest-version-mastodon-3.4

Mastodon Mastodon 3.4Reached end of life

EOL
Nov 6, 2022
First published (updated )
EOL-mastodon-3.4
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203