This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2026-41259 | BDVDB-2026-328677 Detail

mastodonmastodon

Description#

Mastodon is a free, open-source social network server based on ActivityPub. Prior to v4.5.9, v4.4.16, and v4.3.22, Mastodon allows restricting new user sign-up based on e-mail domain names, and performs basic validation on e-mail addresses, but fails to restrict characters that are interpreted differently by some mailing servers. This vulnerability is fixed in v4.5.9, v4.4.16, and v4.3.22.

Impact#

Per CVSS v4.0: confidentiality impact none, integrity impact high, availability impact none. Attack vector: network.

Weaknesses#

  • CWE-841 Improper Enforcement of Behavioral Workflow

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.