PT-2026-52083 · Mastodon · Mastodon

CVE-2026-50129

·

Published

2026-06-24

·

Updated

2026-07-06

CVSS v3.1

7.5

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Mastodon versions prior to 4.5.11 Mastodon versions prior to 4.4.18 Mastodon versions prior to 4.3.24
Description A Denial of Service (DoS) can be triggered due to missing exception handling in the math sanitizer. Malformed <math> nodes can cause a DoS affecting an entire server or specific user services, depending on the action involving the malformed nodes and the interacting services.
Recommendations Update to version 4.5.11. Update to version 4.4.18. Update to version 4.3.24.

Exploit

Fix

DoS

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BIT-MASTODON-2026-50129
CVE-2026-50129
GHSA-QRGQ-9FX2-VF2R

Affected Products

Mastodon