Mminiflux

Products

Exploited and recent CVEs

• CVE-2026-108735 Medium 4.3 Miniflux 2.3.0 through 2.3.3 SSRF via Per-Feed Proxy URL 0.3%
• CVE-2026-55185 Medium 5.1 Miniflux 2: Open Redirect Bypass 0.6%
• CVE-2026-21885 Medium 6.5 Miniflux Media Proxy SSRF via /proxy endpoint allows access to internal network resources 0.3%
• CVE-2025-67713 Medium 5.3 Miniflux 2 has an Open Redirect via protocol-relative `redirect_url` 0.2%
• CVE-2025-31483 Medium 4.8 Stored XSS in Miniflux Media Proxy due to improper Content-Security-Policy configuration 0.4%
• CVE-2023-27591 High 7.5 Unauthenticated Miniflux user can bypass allowed networks check to obtain Prometheus metrics 0.8%
• CVE-2023-27592 Medium 4.8 Stored XSS in Miniflux when opening a broken image due to unescaped ServerError in proxy handler 0.6%