EUVD-2025-203442Published
misskey.js's export data contains private post data
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2025-66402 · Microsoft / collected KEV context
cve-program · CVE-2025-66402
- https://github.com/misskey-dev/misskey/security/advisories/GHSA-496g-mmpw-j9x3
- https://github.com/misskey-dev/misskey/commit/dc77d59f8712d3fe0b73cd4af2035133839cd57b
euvd · EUVD-2025-203442
- https://github.com/misskey-dev/misskey/security/advisories/GHSA-496g-mmpw-j9x3
- https://github.com/misskey-dev/misskey/commit/dc77d59f8712d3fe0b73cd4af2035133839cd57b
nvd · CVE-2025-66402
- https://github.com/misskey-dev/misskey/commit/dc77d59f8712d3fe0b73cd4af2035133839cd57b
- https://github.com/misskey-dev/misskey/security/advisories/GHSA-496g-mmpw-j9x3
osv · GHSA-496g-mmpw-j9x3
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.