Vulnerability in Misskey-dev Misskey

CVE-2026-47746

Misskey is an open source, federated social media platform. Versions 12.37.0 and later, but prior to 2026.5.4, are vulnerable to timing attacks during JSON-LD signature validation and the compaction process. Because the JSON-LD parsing con…

Vulnerability class: TOCTOU (Time-of-Check to Time-of-Use)