{"id":"GO-2025-4226","revision":"3c11e74b381f44e1a7a1b1bb930c7d96","records":[{"revision":"3c11e74b381f44e1a7a1b1bb930c7d96","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2025-4226","aliases":["CVE-2025-67713","GHSA-wqv2-4wpg-8hc9"],"title":"Miniflux has an Open Redirect via protocol-relative redirect_url in miniflux.app","description":"Miniflux has an Open Redirect via protocol-relative redirect_url in miniflux.app","state":0,"publishedAt":"2025-12-15T20:15:46+00:00","modifiedAt":"2026-03-03T04:57:46.824734+00:00","affected":[{"ecosystem":"Go","name":"miniflux.app","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"miniflux.app/v2","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"2.2.15"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/miniflux/v2/security/advisories/GHSA-wqv2-4wpg-8hc9","https://nvd.nist.gov/vuln/detail/CVE-2025-67713","https://github.com/miniflux/v2/commit/76df99f3a3db234cf6b312be5e771485213d03c7"],"sourceUrl":"https://osv.dev/vulnerability/GO-2025-4226","license":"OSV · upstream source license applies","key":"osv:GO-2025-4226","identifiers":["GO-2025-4226","CVE-2025-67713","GHSA-wqv2-4wpg-8hc9"]},"retained":false,"historicalAffected":[]}],"coverage":[]}