Pixelfed

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 6
    Known Exploited: 0
    1
    Critical Level Threats
    0
    High Level Threats
    5
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-86178

    Pixelfed through 0.12.9 Unauthorized Story Access via API

    Last Modified: Sep 08, 2026
    Published: Sep 05, 2026

    CVE-2026-71246

    Pixelfed - Authenticated SSRF via Remote URL Search

    Last Modified: Aug 10, 2026
    Published: Aug 05, 2026

    CVE-2025-30741

    Pixelfed before 0.12.5 allows anyone to follow private accounts and see private posts on other Fediverse servers. This affects users elsewhere in the Fediverse, if they otherwise have any followers from a Pixelfed instance.

    Last Modified: Apr 15, 2026
    Published: Mar 25, 2025

    CVE-2024-25108

    Insufficient authorization allowing elevated access to resources in pixelfed

    Last Modified: May 07, 2025
    Published: Feb 12, 2024

    CVE-2023-0914

    Improper Authorization in pixelfed/pixelfed

    Last Modified: Nov 21, 2024
    Published: Feb 19, 2023
    Items Per Page
    Pixelfed Vulnerabilities & Security CVEs | CVE-DB