CVE Intelligence

Miniflux Miniflux vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Miniflux Miniflux: 1 record(s), with affected versions and fixes.

CVE-2026-108735 Medium · 4.3 CWE-918 Oct 11, 2026
Miniflux 2.3.0 through 2.3.3 SSRF via Per-Feed Proxy URL
Miniflux 2.3.0 through 2.3.3 contains a server-side request forgery vulnerability that allows authenticated users to reach internal addresses by setting a feed's proxy_url. Attackers can point proxy_url at loopback or internal hosts, bypassing FETCHER_ALLOW_PRIVATE_NETWORKS checks to probe internal ports and send proxy-style requests to internal services.