Skip to content
OpenAdvisories

Vendor

FreshRSS

22 known vulnerabilities.

Products

FreshRSS 22
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.9
    CVE-2025-68932

    FreshRSS has weak cryptographic randomness in remember-me token and nonce generation

    FreshRSS is a free, self-hostable RSS aggregator. Prior to version 1.28.0, FreshRSS uses cryptographically weak random number generators (mt_rand() and uniqid()) to generate remember-me authentication tokens and challenge-response nonces. This allows attacker…

    FreshRSS FreshRSS