https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T05:48:38.022352+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-66402 CVE-2025-66402 — misskey.js's export data contains private post data 2026-10-08T05:48:38.037450+00:00

Affected: misskey-dev misskey

Misskey is an open source, federated social media platform. Starting in version 13.0.0-beta.16 and prior to version 2025.12.0, an actor who does not have permission to view favorites or clips can can export the posts and view the contents. Version 2025.12.0 fixes the issue.