https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T10:18:17.697898+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-225264 EUVD-2026-225264 2026-10-06T10:18:17.750606+00:00 EUVD-2026-225264 https://cve.radiocsirt.org/vuln/fkie_cve-2025-30741 fkie_cve-2025-30741 2026-10-06T10:18:17.750649+00:00

Pixelfed before 0.12.5 allows anyone to follow private accounts and see private posts on other Fediverse servers. This affects users elsewhere in the Fediverse, if they otherwise have any followers from a Pixelfed instance.

 https://cve.radiocsirt.org/vuln/ghsa-7287-grhx-542x GHSA-7287-grhx-542x — Pixelfed may allow unauthorized actor to view private posts and private users 2026-10-06T10:18:17.750684+00:00

Affected: Packagist: pixelfed/pixelfed

Pixelfed before 0.12.5 allows anyone to follow private accounts and see private posts on other Fediverse servers. This affects users elsewhere in the Fediverse, if they otherwise have any followers from a Pixelfed instance.