Skip to content
OpenAdvisories

Package · crates.io

lemmy_server

2 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.5

    Any authenticated user may obtain private message details from other users on the same instance

    Lemmy is a link aggregator and forum for the fediverse. Starting in version 0.17.0 and prior to version 0.19.1, users can report private messages, even when they're neither sender nor recipient of the message. The API response to creating a private message re…