7 High
AI Score
Confidence
Low
0.0005 Low
EPSS
Percentile
17.3%
nexkey is a microblogging platform. Insufficient validation of ActivityPub requests received in inbox could allow any user to impersonate another user in certain circumstances. This issue has been patched in version 12.122.2.
github.com/nexryai/nexkey/commit/b96da0eac5a1e75abba94cf926f1251842829bab
github.com/nexryai/nexkey/security/advisories/GHSA-fpxw-rw9v-2gmx