Open Redirect

miniflux.app/v2 is vulnerable to Open Redirect. The vulnerability is due to improper validation of the redirecturl parameter where protocol-relative URLs bypass the url.Parse....IsAbs check, which allows an attacker to redirect users to attacker-controlled websites after login...

GO-2025-4226 Miniflux has an Open Redirect via protocol-relative redirect_url in miniflux.app

Miniflux has an Open Redirect via protocol-relative redirecturl in miniflux.app...