PT-2025-19769

Name of the Vulnerable Software and Affected Versions Misskey versions 12.0.0 through 2025.4.0 Description The issue arises from an oversight in validation performed in UrlPreviewService and MkUrlPreview, allowing an attacker to inject arbitrary CSS into the MkUrlPreview component. This can lead ...