VDB
Sign up
—

GO-2026-4287

Miniflux Media Proxy SSRF via /proxy endpoint allows access to internal network resources in miniflux.app

Quick fix

GO-2026-4287 — miniflux.app/v2: upgrade to the fixed version with the command below.

go get miniflux.app/v2@v2.2.16

Details

Miniflux Media Proxy SSRF via /proxy endpoint allows access to internal network resources in miniflux.app

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/miniflux.app
Introduced in: 0

No fixed version published yet for miniflux.app (go modules). Pin to a known-safe version or switch to an alternative.

Go/miniflux.app/v2
Introduced in: 0Fixed in: 2.2.16
Fixgo get miniflux.app/v2@v2.2.16

References