Nexryai
6 CVEs across 3 Nexryai products. Browse Nexryai vulnerabilities, severities, and proof-of-concept exploits.
Nexryai products with known CVEs
Nexryai CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2025-24973 | Critical | 9.3 | 2025-02-11 | Concorde, formerly know as Nexkey, is a fork of the federated microblogging platform Misskey. Prior to version 12.25Q1.1, due to an improper implementation of… |
CVE-2025-24900 | High | 8.6 | 2025-02-11 | Concorde, formerly know as Nexkey, is a fork of the federated microblogging platform Misskey. Due to a lack of CSRF countermeasures and improper settings of co… |
CVE-2024-56200 | High | 8.6 | 2024-12-19 | Altair is a fork of Misskey v12. Affected versions lack of request validation and lack of authentication in the image proxy for compressing and resizing remote… |
CVE-2023-52077 | High | 8.9 | 2023-12-27 | Nexkey is a lightweight fork of Misskey v12 optimized for small to medium size servers. Prior to 12.23Q4.5, Nexkey allows external apps using tokens issued by… |
CVE-2023-49095 | High | 8.6 | 2023-11-30 | nexkey is a microblogging platform. Insufficient validation of ActivityPub requests received in inbox could allow any user to impersonate another user in certa… |
CVE-2023-43805 | High | 7.5 | 2023-10-04 | Nexkey is a fork of Misskey, an open source, decentralized social media platform. Prior to version 12.121.9, incomplete URL validation can allow users to bypas… |