Skip to content
OpenAdvisories

Vendor

mastodon

46 known vulnerabilities.

Products

mastodon 44 mastodon/mastodon 2
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 3.7
    CVE-2025-67500

    Mastodon Error Handling Discrepancy Enables Private Status Existence Enumeration

    Mastodon is a free, open-source social network server based on ActivityPub. Versions 4.2.27 and prior, 4.3.0-beta.1 through 4.3.14, 4.4.0-beta.1 through 4.4.9, 4.5.0-beta.1 through 4.5.2 have discrepancies in error handling which allow checking whether a give…

    mastodon mastodon
  • Low 3.5
    CVE-2025-62174

    Mastodon allows continued access after password reset via CLI

    Mastodon is a free, open-source social network server based on ActivityPub. In Mastodon before 4.4.6, 4.3.14, and 4.2.27, when an administrator resets a user account's password via the command-line interface using `bin/tootctl accounts modify --reset-password…

    mastodon mastodon
  • Low 3.1
    CVE-2024-25619

    Destroying OAuth Applications doesn't notify Streaming of Access Tokens being destroyed in mastodon

    Mastodon is a free, open-source social network server based on ActivityPub. When an OAuth Application is destroyed, the streaming server wasn't being informed that the Access Tokens had also been destroyed, this could have posed security risks to users by all…

    mastodon mastodon