CVE-2023-49095

HIGH 7.5CVE-2023-49095 · Published 30/11/2023 · updated 17/06/2026

In short

CVE-2023-49095 is a HIGH (CVSS 7.5) vulnerability affecting nexkey (nexryai).
Chance of exploitation in the next 30 days (EPSS): 0.56%, higher than 47.1% of all vulnerabilities.
Fix: update to 12.122.2 or later.

Package	Affected versions	Patched versions
nexkey nexryai	`< 12.122.2`	`12.122.2`

Description

nexkey is a microblogging platform. Insufficient validation of ActivityPub requests received in inbox could allow any user to impersonate another user in certain circumstances. This issue has been patched in version 12.122.2.

References

nexryai/nexkey commit b96da0e · Patch
nexryai/nexkey security advisory · Patch

More vulnerabilities in nexkey

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free