CVE-2022-45292: Funkwhale

Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days.

User invites for Funkwhale v1.2.8 do not permanently expire after being used for signup and can be used again after an account has been deleted.

Affected products

• Funkwhale Funkwhale: version 1.2.8 only

Published 2022-12-09. Last modified 2026-06-17.