miniflux.app vulnerabilities (Go)

5 vulnerabilities.

• miniflux.app Go Miniflux 2: Open Redirect Bypass CVE-2026-55185 Fix available 5.1 MediumJune 19, 2026
• miniflux.app Go Miniflux Media Proxy SSRF via /proxy endpoint allows access to internal network resources CVE-2026-21885 Fix available 6.5 MediumJanuary 7, 2026
• miniflux.app Go Miniflux 2 has an Open Redirect via protocol-relative `redirect_url` CVE-2025-67713 Fix available 5.3 MediumDecember 10, 2025
• miniflux.app Go Stored XSS in Miniflux Media Proxy due to improper Content-Security-Policy configuration CVE-2025-31483 Fix available 4.8 MediumApril 3, 2025
• miniflux.app Go Unauthenticated Miniflux user can bypass allowed networks check to obtain Prometheus metrics CVE-2023-27591 Fix available 7.5 HighMarch 17, 2023