Skip to content
OpenAdvisories

Package · Alpine

miniflux

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2023-27591

    Unauthenticated Miniflux user can bypass allowed networks check to obtain Prometheus metrics

    Miniflux is a feed reader. Prior to version 2.0.43, an unauthenticated user can retrieve Prometheus metrics from a publicly reachable Miniflux instance where the `METRICS_COLLECTOR` configuration option is enabled and `METRICS_ALLOWED_NETWORKS` is set to `127…

    miniflux v2 miniflux.app/v2 miniflux.app Alpine Go