Security Advisories for lemmy_api in cargo
Moderate
2 months ago
Lemmy resend-verification endpoint exposes registered email addresses to unauthenticated users
cargo
lemmy_api
Moderate
2 months ago
Lemmy may expose private community data through community, saved, liked, and modlog API views
cargo
lemmy_api
Moderate
2 months ago
Private Lemmy instances expose multi-community metadata without authentication
cargo
lemmy_api
Potential
Moderate
over 1 year ago
Lemmy user purging users or communities or banning users can delete images they didn't upload/exclusively use
cargo
lemmy_server
Potential
Moderate
over 1 year ago
Server-Side Request Forgery (SSRF) in activitypub_federation
cargo
activitypub_federation
Potential
High
over 2 years ago
Any authenticated user may obtain private message details from other users on the same instance
cargo
lemmy_server