VendorsMiniflux Projectminifluxall versions
Vulnerabilities

Miniflux Project Miniflux

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2023-27591
Unauthenticated Miniflux user can bypass allowed networks check to obtain Prometheus metrics
Published 2023-03-17 · Modified
7.5EPSS 0.008
CVE-2026-21885
Miniflux Media Proxy SSRF via /proxy endpoint allows access to internal network resources
Published 2026-01-08 · Analyzed
6.5EPSS 0.003
CVE-2025-67713
Miniflux 2 has an Open Redirect via protocol-relative `redirect_url`
Published 2025-12-11 · Analyzed
6.1EPSS 0.002
CVE-2023-27592
Stored XSS in Miniflux when opening a broken image due to unescaped ServerError in proxy handler
Published 2023-03-17 · Modified
5.4EPSS 0.006