Go/miniflux.app/v2 CVE-2025-67713: medium 6.1, EPSS 0.22%
Miniflux has an Open Redirect via protocol-relative redirect_url in miniflux.app
Action: Upgrade miniflux.app/v2 to 2.2.15 or later.
go get miniflux.app/v2@v2.2.15Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.2.15 | - |
Fixed versions
| 2.2.15 |
Sources
- osv: GO-2025-4226#Go/miniflux.app/v2
- nvd: CVE-2025-67713
- https://github.com/miniflux/v2/security/advisories/GHSA-wqv2-4wpg-8hc9
- https://github.com/miniflux/v2/commit/76df99f3a3db234cf6b312be5e771485213d03c7
CVE-2025-67713 · published · modified · JSON