Skip to content
OpenAdvisories

Package · Packagist

pixelfed/pixelfed

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • Medium 4.3
    CVE-2025-30741

    Pixelfed may allow unauthorized actor to view private posts and private users

    Pixelfed before 0.12.5 allows anyone to follow private accounts and see private posts on other Fediverse servers. This affects users elsewhere in the Fediverse, if they otherwise have any followers from a Pixelfed instance.

    pixelfed pixelfed pixelfed/pixelfed Packagist
  • Critical 9.9
    CVE-2024-25108

    Insufficient authorization allowing elevated access to resources in pixelfed

    Pixelfed is an open source photo sharing platform. When processing requests authorization was improperly and insufficiently checked, allowing attackers to access far more functionality than users intended, including to the administrative and moderator functio…

    pixelfed pixelfed pixelfed/pixelfed Packagist
  • Medium 4.3
    CVE-2023-0914

    Improper Authorization in pixelfed/pixelfed

    Improper Authorization in GitHub repository pixelfed/pixelfed prior to 0.11.4.

    pixelfed pixelfed/pixelfed pixelfed/pixelfed Packagist
  • Medium 5.3
    CVE-2023-0901

    Exposure of Sensitive Information to an Unauthorized Actor in pixelfed/pixelfed

    Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository pixelfed/pixelfed prior to 0.11.4.

    pixelfed pixelfed/pixelfed pixelfed/pixelfed Packagist