Pixelfed

2 known vulnerabilities in Pixelfed, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-93960 CVSS 2.1 low A vulnerability was identified in Pixelfed up to 0.12.11. Impacted is the function instancePeers of the file…
  • CVE-2026-86178 CVSS 5.3 medium Pixelfed through 0.12.9 fails to validate follower status in StoryComposeController react and comment endpoints, allowing authenticated…