CVE Intelligence

Vulnerabilidades do Miniflux Miniflux

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Miniflux Miniflux: 1 registro(s), com versões afetadas e correções.

CVE-2026-108735 Média · 4.3 CWE-918 11/10/2026
Miniflux 2.3.0 through 2.3.3 SSRF via Per-Feed Proxy URL
Miniflux 2.3.0 through 2.3.3 contains a server-side request forgery vulnerability that allows authenticated users to reach internal addresses by setting a feed's proxy_url. Attackers can point proxy_url at loopback or internal hosts, bypassing FETCHER_ALLOW_PRIVATE_NETWORKS checks to probe internal ports and send proxy-style requests to internal services.