https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T20:33:58.112200+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-mastodon-2025-27399 BIT-mastodon-2025-27399 — Mastodon's domain blocks & rationales ignore user approval when visibility set as "users" 2026-10-12T20:33:58.114994+00:00

Affected: Bitnami: mastodon

Mastodon is a self-hosted, federated microblogging platform. In versions prior to 4.1.23, 4.2.16, and 4.3.4, when the visibility for domain blocks/reasons is set to "users" (localized English string: "To logged-in users"), users that are not yet approved can view the block reasons. Instance admins that do not want their domain blocks to be public are impacted. Versions 4.1.23, 4.2.16, and 4.3.4 fix the issue.

 https://cve.radiocsirt.org/vuln/euvd-2026-219472 EUVD-2026-219472 2026-10-12T20:33:58.115039+00:00 EUVD-2026-219472 https://cve.radiocsirt.org/vuln/fkie_cve-2025-27399 fkie_cve-2025-27399 2026-10-12T20:33:58.115055+00:00

Mastodon is a self-hosted, federated microblogging platform. In versions prior to 4.1.23, 4.2.16, and 4.3.4, when the visibility for domain blocks/reasons is set to "users" (localized English string: "To logged-in users"), users that are not yet approved can view the block reasons. Instance admins that do not want their domain blocks to be public are impacted. Versions 4.1.23, 4.2.16, and 4.3.4 fix the issue.