Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 23:16:38 +0000 bdu:2023-08391 https://cve.radiocsirt.org/vuln/bdu:2023-08391 bdu:2023-08391 https://cve.radiocsirt.org/vuln/bdu:2023-08391 BIT-mastodon-2023-42451 — Mastodon Invalid Domain Name Normalization vulnerability https://cve.radiocsirt.org/vuln/bit-mastodon-2023-42451 <p><strong>Affected:</strong> Bitnami: mastodon</p> <p>Mastodon is a free, open-source social network server based on ActivityPub. Prior to versions 3.5.14, 4.0.10, 4.1.8, and 4.2.0, under certain circumstances, attackers can exploit a flaw in domain name normalization to spoof domains they do not own. Versions 3.5.14, 4.0.10, 4.1.8, and 4.2.0 contain a patch for this issue.</p> <p><strong>Affected:</strong> Bitnami: mastodon</p> <p>Mastodon is a free, open-source social network server based on ActivityPub. Prior to versions 3.5.14, 4.0.10, 4.1.8, and 4.2.0, under certain circumstances, attackers can exploit a flaw in domain name normalization to spoof domains they do not own. Versions 3.5.14, 4.0.10, 4.1.8, and 4.2.0 contain a patch for this issue.</p> https://cve.radiocsirt.org/vuln/bit-mastodon-2023-42451 EUVD-2026-188008 https://cve.radiocsirt.org/vuln/euvd-2026-188008 EUVD-2026-188008 https://cve.radiocsirt.org/vuln/euvd-2026-188008 fkie_cve-2023-42451 https://cve.radiocsirt.org/vuln/fkie_cve-2023-42451 <p>Mastodon is a free, open-source social network server based on ActivityPub. Prior to versions 3.5.14, 4.0.10, 4.1.8, and 4.2.0-rc2, under certain circumstances, attackers can exploit a flaw in domain name normalization to spoof domains they do not own. Versions 3.5.14, 4.0.10, 4.1.8, and 4.2.0-rc2 contain a patch for this issue.</p> <p>Mastodon is a free, open-source social network server based on ActivityPub. Prior to versions 3.5.14, 4.0.10, 4.1.8, and 4.2.0-rc2, under certain circumstances, attackers can exploit a flaw in domain name normalization to spoof domains they do not own. Versions 3.5.14, 4.0.10, 4.1.8, and 4.2.0-rc2 contain a patch for this issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-42451 gsd-2023-42451 https://cve.radiocsirt.org/vuln/gsd-2023-42451 gsd-2023-42451 https://cve.radiocsirt.org/vuln/gsd-2023-42451