CVE-2019-1020010: Misskey

Medium severity, CVSS 6.1. EPSS: 1.3% chance of exploitation in the next 30 days.

Misskey before 10.102.4 allows hijacking a user's token.

Affected products

• Misskey Misskey: from 10.46.0, before 10.102.4 (fixed in 10.102.4); from 11.0.0, before 11.20.2 (fixed in 11.20.2); version 11.0.0 only

Published 2019-07-29. Last modified 2026-06-17.