Skip to content
OpenAdvisories

Package · crates.io

lemmy_api_common

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-42180

    Lemmy: SSRF in /api/v3/post via Webmention dispatch

    Lemmy is a link aggregator and forum for the fediverse. Prior to version 0.19.18, Lemmy allows an authenticated low-privileged user to create a link post through POST /api/v3/post. When a post is created in a public community, the backend asynchronously sends…

    LemmyNet lemmy lemmy_api_common crates.io
  • Medium 6.5
    CVE-2026-42181

    Lemmy: SSRF and internal image disclosure in post link metadata via unvalidated og:image

    Lemmy is a link aggregator and forum for the fediverse. Prior to version 0.19.18, Lemmy fetches metadata for user-supplied post URLs and, under the default StoreLinkPreviews image mode, downloads the preview image through local pict-rs. While the top-level pa…

    LemmyNet lemmy lemmy_api_common crates.io