miniflux.app
Activity
- Latest release
- 3y ago
- Total releases
- 1
- Cadence
- —
- Last 12 months
- 0
Details
- First release
- Jul 22, 2023
| Version | Released | |
|---|---|---|
v1.0.46
initial
5 CVEs
CVE-2026-55185
GO-2026-5500
GHSA-m999-j542-5w3r
Jun 25, 2026
Open Redirect Bypass in miniflux-v2 in miniflux.app Open Redirect Bypass in miniflux-v2 in miniflux.app Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-21885
GO-2026-4287
GHSA-xwh2-742g-w3wp
Jan 12, 2026
Miniflux Media Proxy SSRF via /proxy endpoint allows access to internal network resources in miniflux.app Miniflux Media Proxy SSRF via /proxy endpoint allows access to internal network resources in miniflux.app References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-67713
GO-2025-4226
GHSA-wqv2-4wpg-8hc9
Dec 15, 2025
Miniflux has an Open Redirect via protocol-relative redirect_url in miniflux.app Miniflux has an Open Redirect via protocol-relative redirect_url in miniflux.app References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-31483
GO-2025-3591
GHSA-cq88-842x-2jhp
Apr 09, 2025
Miniflux Media Proxy vulnerable to Stored Cross-site Scripting due to improper Content-Security-Policy configuration in miniflux.app Miniflux Media Proxy vulnerable to Stored Cross-site Scripting due to improper Content-Security-Policy configuration in miniflux.app References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-27591
GHSA-3qjf-qh38-x73v
Apr 02, 2025
Unauthenticated Miniflux user can bypass allowed networks check to obtain Prometheus metrics
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
ImpactAn unauthenticated user can retrieve Prometheus metrics from a publicly reachable Miniflux instance where the PatchesPR #1745 fixes the problem. Available in Miniflux >= 2.0.43. WorkaroundsSet References
References
Updated Sep 10, 2026 · Source: OSV.dev |
v1.0.46
initial
Dependencies (16)
+ 8 more |