Skip to content
FFriendsOfFlarum
Products
| Product | CVEs | Exploited | Latest |
|---|
| byobu | 1 | – | Aug 1, 2022 |
| oauth | 1 | – | Sep 25, 2026 |
| upload | 1 | – | May 25, 2022 |
Exploited and recent CVEs
-
CVE-2026-92161
Critical 9.8
FriendsOfFlarum OAuth: Unauthenticated account takeover via unverified email trust in Discord OAuth provider
0.3%
-
CVE-2022-35921
Low 3.5
User preference to prevent private discussions not respected in fof/byobu
0.5%
-
CVE-2022-30999
High 8.7
Possible cross-site scripting attack via unsanitized SVG files in FoF Upload
1.3%