Lucene search
+L

5 matches found

RedhatCVE
RedhatCVE
•added 2026/02/11 1:33 a.m.•20 views

CVE-2026-25808

Hollo is a federated single-user microblogging software designed to be federated through ActivityPub. Prior to 0.6.20 and 0.7.2, there is a security vulnerability where DMs and followers-only posts were exposed through the ActivityPub outbox endpoint without authorization. This vulnerability is...

7.5CVSS5.9AI score0.00578EPSS
SaveExploits1References1
NVD
NVD
•added 2026/02/09 10:16 p.m.•24 views

CVE-2026-25808

Hollo is a federated single-user microblogging software designed to be federated through ActivityPub. Prior to 0.6.20 and 0.7.2, there is a security vulnerability where DMs and followers-only posts were exposed through the ActivityPub outbox endpoint without authorization. This vulnerability is...

7.5CVSS0.00578EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2026/02/09 9:50 p.m.•46 views

CVE-2026-25808 Hollo DMs get leaked and can be seen on Webfinger Browser

Hollo is a federated single-user microblogging software designed to be federated through ActivityPub. Prior to 0.6.20 and 0.7.2, there is a security vulnerability where DMs and followers-only posts were exposed through the ActivityPub outbox endpoint without authorization. This vulnerability is...

7.5CVSS0.00578EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2026/02/09 9:50 p.m.•12 views

CVE-2026-25808 Hollo DMs get leaked and can be seen on Webfinger Browser

Hollo is a federated single-user microblogging software designed to be federated through ActivityPub. Prior to 0.6.20 and 0.7.2, there is a security vulnerability where DMs and followers-only posts were exposed through the ActivityPub outbox endpoint without authorization. This vulnerability is...

7.5CVSS5.9AI score0.00578EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2026/02/09 9:50 p.m.•25 views

CVE-2026-25808 Hollo DMs get leaked and can be seen on Webfinger Browser

Hollo is a federated single-user microblogging software designed to be federated through ActivityPub. Prior to 0.6.20 and 0.7.2, there is a security vulnerability where DMs and followers-only posts were exposed through the ActivityPub outbox endpoint without authorization. This vulnerability is...

7.5CVSS5.5AI score
SaveExploits0References6
Rows per page
Query Builder