GO-2026-4287
NoneCVSS
—
EPSS
—
Published
Jan 12, 2026
CISA due date
—
The record
Miniflux Media Proxy SSRF via /proxy endpoint allows access to internal network resources in miniflux.app
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | miniflux.app | 0 | No fix |
| Go | miniflux.app/v2 | 0 | 2.2.16 |
Related vulnerabilities
- CVE-2026-21885 Miniflux Media Proxy SSRF via /proxy endpoint allows access to internal network resources Same vulnerability
- GO-2025-4226 Miniflux has an Open Redirect via protocol-relative redirect_url in miniflux.app Also affects miniflux.app
- CVE-2025-67713 Miniflux 2 is an open source feed reader. Also affects miniflux.app