All vulnerabilities

Servers and applications

GHSA-mq2m-hr29-8gqf

OEmbed embeds allow <embed> tag (blocked by CSP)

Severity
Low
Published
27 Feb 2025
Last changed
27 Feb 2025
Added to UpHeron
3 Nov 2026
Fixed in
4.1.23
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
MastodonServers and applications · github:mastodon/mastodon
  • Every version before 4.1.23

References