All vulnerabilities

Servers and applications

GHSA-qp4r-p842-mw5c

Client IP address spoofing and block/rate-limit bypass

Severity
Medium 6.5
Published
3 Nov 2026
Last changed
3 Nov 2026
Added to UpHeron
3 Nov 2026
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
MastodonServers and applications · github:mastodon/mastodon
  • Every version up to 4.7.4

References