Miniflux 2 has an Open Redirect via protocol-relative `redirect_url`

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2025-67713 · Microsoft / collected KEV context

EUVD-2025-202448

GHSA-wqv2-4wpg-8hc9

GO-2025-4226

cve-program · CVE-2025-67713

• https://github.com/miniflux/v2/security/advisories/GHSA-wqv2-4wpg-8hc9
• https://github.com/miniflux/v2/commit/76df99f3a3db234cf6b312be5e771485213d03c7

euvd · EUVD-2025-202448

• https://github.com/miniflux/v2/security/advisories/GHSA-wqv2-4wpg-8hc9
• https://github.com/miniflux/v2/commit/76df99f3a3db234cf6b312be5e771485213d03c7

nvd · CVE-2025-67713

• https://github.com/miniflux/v2/commit/76df99f3a3db234cf6b312be5e771485213d03c7
• https://github.com/miniflux/v2/security/advisories/GHSA-wqv2-4wpg-8hc9

osv · GHSA-wqv2-4wpg-8hc9

• https://github.com/miniflux/v2/security/advisories/GHSA-wqv2-4wpg-8hc9
• https://nvd.nist.gov/vuln/detail/CVE-2025-67713
• https://github.com/miniflux/v2/commit/76df99f3a3db234cf6b312be5e771485213d03c7
• https://github.com/miniflux/v2

osv · GO-2025-4226

• https://github.com/miniflux/v2/security/advisories/GHSA-wqv2-4wpg-8hc9
• https://nvd.nist.gov/vuln/detail/CVE-2025-67713
• https://github.com/miniflux/v2/commit/76df99f3a3db234cf6b312be5e771485213d03c7

No related operational record is retained in the current change model.