CVE-2026-22245 | mastodon up to 4.2.28/4.3.16/4.4.10/4.5.3 Outbound Request server-side request forgery

A vulnerability was found in mastodon up to 4.2.28/4.3.16/4.4.10/4.5.3 and classified as critical. This vulnerability affects unknown code of the component Outbound Request Handler. The manipulation results in server-side request forgery.

This vulnerability is cataloged as CVE-2026-22245. The attack may be launched remotely. There is no exploit available.

It is suggested to upgrade the affected component.