What’s Vulnerable › Products

DIYgod RSSHub vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your DIYgod RSSHub version is affected

Latest DIYgod RSSHub vulnerabilities

• CVE-2024-27927 — RSSHub vulnerable to SSRF in /mastodon, /zjoi, and /m4 (CVSS 6.5)
• CVE-2024-27926 — RSSHub Cross-site Scripting vulnerability caused by internal media proxy (CVSS 6.1)
• CVE-2023-26491 — RSSHub is vulnerable to cross-site scripting (XSS) via unvalidated URL parameters (CVSS 6.1)
• CVE-2023-22493 — RSSHub is vulnerable to SSRF (Server-Side Request Forgery) (CVSS 7.5)
• CVE-2022-31110 — Denial of Service (DoS) vulnerability in RSSHub (CVSS 7.5)
• CVE-2021-21278 — Risk of code injection in RSSHub (CVSS 9.8)