Skip to content
OpenAdvisories

Vendor

mastodon

46 known vulnerabilities.

Products

mastodon 44 mastodon/mastodon 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-47777 Public exploit

    Mastodon has a consent-check bypass in its remote Collections

    Mastodon is a free, open-source social network server based on ActivityPub. In versions there is a missing condition in the check if remote accounts consented to be featured in a remote Collection could lead to attackers bypassing the check and faking consent…

    mastodon mastodon