{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"miniflux.app","cve_ids":["CVE-2025-31483"],"ecosystem":"Go","epss":0.00426,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-cq88-842x-2jhp","id":"tcs_01M5KG7WC5EVDBJEQ61XKVZEQM","modified_at":"2026-03-03T04:56:28.741222Z","published_at":"2025-04-09T17:05:36Z","references":["https://osv.dev/vulnerability/GO-2025-3591","https://github.com/miniflux/v2/security/advisories/GHSA-cq88-842x-2jhp","https://nvd.nist.gov/vuln/detail/CVE-2025-31483","https://github.com/miniflux/v2/commit/cb695e653a08af4cabcb277c271ce74bd0c746e6"],"severity":{"label":"medium","score":4.8},"sources":[{"source":"osv","source_id":"GO-2025-3591","url":"https://osv.dev/vulnerability/GO-2025-3591"},{"source":"nvd","source_id":"CVE-2025-31483","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-31483"}],"summary":"Miniflux Media Proxy vulnerable to Stored Cross-site Scripting due to improper Content-Security-Policy configuration in miniflux.app"}