misskey vulnerabilities and fixes

Recent CVEs affecting misskey, with upgrade or downgrade steps. 14 tracked.

misskey has 14 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 14. Most recent: 2026-03-10. Highest priority: CVE-2024-32983 (score 47/100).

• CVE-2025-66482 MEDIUM 6.5 UPGRADE Misskey is an open source, federated social media platform
• CVE-2025-66402 MEDIUM 6.5 UPGRADE Misskey is an open source, federated social media platform
• CVE-2026-28433 MEDIUM 4.3 UPGRADE Misskey is an open source, federated social media platform
• CVE-2026-28432 HIGH 7.5 UPGRADE Misskey is an open source, federated social media platform
• CVE-2026-28431 HIGH 7.5 UPGRADE Misskey is an open source, federated social media platform
• CVE-2025-25306 CRITICAL 9.3 UPGRADE Misskey is an open source, federated social media platform
• CVE-2025-24897 HIGH 8.2 UPGRADE Misskey is an open source, federated social media platform
• CVE-2025-24896 HIGH 8.1 UPGRADE Misskey is an open source, federated social media platform
• CVE-2024-52593 MEDIUM 5.3 UPGRADE Misskey is an open source, federated social media platform.In affected versions missing validation in `NoteCre
• CVE-2024-52592 MEDIUM 5.3 UPGRADE Misskey is an open source, federated social media platform
• CVE-2024-52591 CRITICAL 9.3 UPGRADE Misskey is an open source, federated social media platform
• CVE-2024-52590 MEDIUM 6.5 UPGRADE Misskey is an open source, federated social media platform
• CVE-2024-52579 MEDIUM 6.4 UPGRADE Misskey is an open source, federated social media platform
• CVE-2024-32983 HIGH 8.2 UPGRADE Misskey is an open source, decentralized microblogging platform

FAQ

How do I fix misskey vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is misskey being exploited right now?

None of the tracked misskey CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which misskey CVE should I patch first?

CVE-2024-32983 currently ranks highest (47/100): Misskey is an open source, decentralized microblogging platform.

RSS feed for misskey · ← Back to latest CVEs