misskey-js (npm) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the npm package misskey-js, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2025-66402 — CVSS 6.5 (medium): Misskey is an open source, federated social media platform. Starting in version 13.0.0-beta.16 and prior to version 2025.12.0, an actor who…
• CVE-2025-66482 — CVSS 6.5 (medium): Misskey is an open source, federated social media platform. Attackers who use an untrusted reverse proxy or not using a reverse proxy at…