[MEDIUM] Pixelfed may allow unauthorized actor to view private posts and private users

PKSA-brgp-r3z9-1w4p CVE-2025-30741 GHSA-7287-grhx-542x

Affected package: pixelfed/pixelfed

Affected version: <0.12.5

Reported by:
GitHub