CVE-2022-31263: Joinmastodon Mastodon

Medium severity, CVSS 5.3. EPSS: 0.9% chance of exploitation in the next 30 days.

app/models/user.rb in Mastodon before 3.5.0 allows a bypass of e-mail restrictions.

Affected products

• Joinmastodon Mastodon: before 3.5.0 (fixed in 3.5.0)

Published 2022-05-24. Last modified 2026-06-17.