https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 19:18:30 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-237682 EUVD-2026-237682 https://cve.radiocsirt.org/vuln/euvd-2026-237682 https://cve.radiocsirt.org/vuln/fkie_cve-2025-46553 <p>@misskey-dev/summaly is a tool for getting a summary of a web page. Starting in version 3.0.1 and prior to version 5.2.1, a logic error in the main `summaly` function causes the `allowRedirects` option to never be passed to any plugins, and as a result, isn&#39;t enforced. Misskey will follow redirects, despite explicitly requesting not to. Version 5.2.1 contains a patch for the issue.</p> <p>@misskey-dev/summaly is a tool for getting a summary of a web page. Starting in version 3.0.1 and prior to version 5.2.1, a logic error in the main `summaly` function causes the `allowRedirects` option to never be passed to any plugins, and as a result, isn&#39;t enforced. Misskey will follow redirects, despite explicitly requesting not to. Version 5.2.1 contains a patch for the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-46553 https://cve.radiocsirt.org/vuln/ghsa-7899-w6c4-vqc4 <p><strong>Affected:</strong> npm: @misskey-dev/summaly</p> <p>### Summary A logic error in the main `summaly` function causes the `allowRedirects` option to never be passed to any plugins, and as a result, isn&#39;t enforced.</p> <p>### Details In the main `summaly` function, a new `scrapingOptions` object is created and passed to either the matched plugin, if any, or the default summarize function. The issue here is that the new `scrapingOptions` object is not provided the `allowRedirects` property of `opts`.</p> <p>### PoC - Publish a post containing a link to any URL that redirects on Misskey. - A preview will be generated for the target of the redirect, despite Misskey passing `allowRedirects: false`.</p> <p>### Impact Misskey will follow redirects, despite explicitly requesting not to.</p> <p><strong>Affected:</strong> npm: @misskey-dev/summaly</p> <p>### Summary A logic error in the main `summaly` function causes the `allowRedirects` option to never be passed to any plugins, and as a result, isn&#39;t enforced.</p> <p>### Details In the main `summaly` function, a new `scrapingOptions` object is created and passed to either the matched plugin, if any, or the default summarize function. The issue here is that the new `scrapingOptions` object is not provided the `allowRedirects` property of `opts`.</p> <p>### PoC - Publish a post containing a link to any URL that redirects on Misskey. - A preview will be generated for the target of the redirect, despite Misskey passing `allowRedirects: false`.</p> <p>### Impact Misskey will follow redirects, despite explicitly requesting not to.</p> https://cve.radiocsirt.org/vuln/ghsa-7899-w6c4-vqc4