Skip to content
OpenAdvisories

Package · crates.io

lemmy_routes

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.7
    CVE-2026-29178

    Lemmy: Unauthenticated SSRF via file_type query parameter injection in image endpoint

    Lemmy, a link aggregator and forum for the fediverse, is vulnerable to server-side request forgery via a dependency on activitypub_federation, a framework for ActivityPub federation in Rust. Prior to version 0.19.16, the GET /api/v4/image/{filename} endpoint …

    LemmyNet lemmy lemmy_routes crates.io