Skip to content

Product

misskey-dev @misskey-dev/summaly vulnerabilities

2 published CVES affecting misskey-dev @misskey-dev/summaly, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
0
Medium
1
Low
1
Unscored
0
CISA KEV
0

Latest misskey-dev @misskey-dev/summaly CVEs

Newest publication first

  1. GHSA-jqx4-9gpq-rppm @misskey-dev/summaly allows IP Filter Bypass via Redirect

    Published
    MediumCVSS 5.3

    Summary Due to a validation error in got.scpaping, it is possible to use an HTTP redirect to avoid IP filtering. Details In got.scpaping, Summaly first makes a HTTP HEAD request to the page being summarized. It then preforms private IP address checks on the HEAD response, then ma...

  2. CVE-2025-46553 @misskey-dev/summaly Redirect Filter Bypass

    Published
    LowCVSS 2.1 EPSS 0.26%

    @misskey-dev/summaly is a tool for getting a summary of a web page. Starting in version 3.0.1 and prior to version 5.2.1, a logic error in the main summaly function causes the allowRedirects option to never be passed to any plugins, and as a result, isn't enforced. Misskey will f...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.