activitypub_federation vulnerabilities (crates.io)

2 vulnerabilities.

• activitypub_federation crates.io Lemmy's Activitypub-Federation has SSRF via 0.0.0.0 bypass in activitypub-federation-rust v4_is_invalid() CVE-2026-33693 Public exploitFix available 6.5 MediumMarch 25, 2026
• activitypub_federation crates.io Server-Side Request Forgery (SSRF) in activitypub_federation CVE-2025-25194 4.0 MediumFebruary 10, 2025