miniflux/v2 Security Advisories | GitStock

medium2026-06-19

CVE-2026-55185-Open Redirect Bypass in miniflux-v2

GHSA-m999-j542-5w3r

medium2026-01-07

CVE-2026-21885-Miniflux Media Proxy SSRF via /proxy endpoint allows access to internal network resources

GHSA-xwh2-742g-w3wp

medium2025-12-10

CVE-2025-67713-Miniflux has an Open Redirect via protocol-relative redirect_url

GHSA-wqv2-4wpg-8hc9

medium2025-04-04

CVE-2025-31483-Miniflux Media Proxy vulnerable to Stored Cross-site Scripting due to improper Content-Security-Policy configuration

GHSA-cq88-842x-2jhp

medium2025-04-02

CVE-2023-27592-Stored XSS in Miniflux when opening a broken image due to unescaped ServerError in proxy handler

GHSA-mqqg-xjhj-wfgw

high2025-04-02

CVE-2023-27591-Unauthenticated Miniflux user can bypass allowed networks check to obtain Prometheus metrics

GHSA-3qjf-qh38-x73v