Filtered by vendor Joinmastodon
Subscriptions
Total
24 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2022-31263 | 1 Joinmastodon | 1 Mastodon | 2024-11-21 | 5.3 Medium |
| app/models/user.rb in Mastodon before 3.5.0 allows a bypass of e-mail restrictions. | ||||
| CVE-2022-24307 | 1 Joinmastodon | 1 Mastodon | 2024-11-21 | 9.8 Critical |
| Mastodon before 3.3.2 and 3.4.x before 3.4.6 has incorrect access control because it does not compact incoming signed JSON-LD activities. (JSON-LD signing has been supported since version 1.6.0.) | ||||
| CVE-2022-0432 | 1 Joinmastodon | 1 Mastodon | 2024-11-21 | 6.1 Medium |
| Prototype Pollution in GitHub repository mastodon/mastodon prior to 3.5.0. | ||||
| CVE-2018-21018 | 1 Joinmastodon | 1 Mastodon | 2024-11-21 | 9.8 Critical |
| Mastodon before 2.6.3 mishandles timeouts of incompletely established sessions. | ||||