—
GO-2025-3591
Miniflux Media Proxy vulnerable to Stored Cross-site Scripting due to improper Content-Security-Policy configuration in miniflux.app
Quick fix
GO-2025-3591 — miniflux.app/v2: upgrade to the fixed version with the command below.
go get miniflux.app/v2@v2.2.7Details
Miniflux Media Proxy vulnerable to Stored Cross-site Scripting due to improper Content-Security-Policy configuration in miniflux.app
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/miniflux.app
Introduced in:
0No fixed version published yet for miniflux.app (go modules). Pin to a known-safe version or switch to an alternative.