CVE-2025-62721

LinkAce (self-hosted archive for website links) is affected by CVE-2025-62721. In versions ≤ 2.3.1, the authenticated RSS feed endpoints in the FeedController lack proper authorization, allowing any authenticated user to access all links, lists, and tags across all users. The issue is fixed in ve...