EUVD-2026-52485

Misskey is an open source, federated social media platform. Versions 12.37.0 and later, but prior to 2026.5.4, contain a vulnerability in the JSON-LD signature validation and compaction process that allows spoofed activities to be accepted as valid. This issue has been fixed in version 2026.5.4...

PT-2024-35387

Name of the Vulnerable Software and Affected Versions Misskey versions prior to 2024.11.0-alpha.3 Description The issue concerns missing validation in ApRequestService.signedGet, allowing an attacker to create fake user profiles that appear to be from a different instance. These profiles can be...