misskey-js vulnerabilities (npm)

2 vulnerabilities.

• misskey-js npm Misskey has a login rate limit bypass via spoofed X-Forwarded-For header CVE-2025-66482 Fix available 6.9 MediumDecember 15, 2025
• misskey-js npm misskey.js's export data contains private post data CVE-2025-66402 Fix available 7.1 HighDecember 15, 2025