Skip to content
OpenAdvisories

Package · Alpine

miniflux

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.8
    CVE-2023-27592

    Stored XSS in Miniflux when opening a broken image due to unescaped ServerError in proxy handler

    Miniflux is a feed reader. Since v2.0.25, Miniflux will automatically proxy images served over HTTP to prevent mixed content errors. When an outbound request made by the Go HTTP client fails, the `html.ServerError` is returned unescaped without the expected C…

    miniflux v2 miniflux.app/v2 miniflux Alpine Go