@fedify/fedify vulnerabilities (npm)
7 vulnerabilities.
-
@fedify/fedifynpm Fedify has an incomplete SSRF mitigation after GHSA-p9cg-vqcc-grcx: validatePublicUrl allows special-use IPv4 ranges 8.6 High -
@fedify/fedifynpm Fedify has an LD-Signature Bypass via JSON-LD Named-Graph Restructuring 7.0 High -
@fedify/fedifynpm Fedify affected by resource exhaustion caused by unbounded redirect following during remote key/document resolution 7.5 High -
@fedify/fedifynpm Fedify has ReDoS Vulnerability in HTML Parsing Regex 7.5 High -
@fedify/fedifynpm @fedify/fedify: Improper Authentication and Incorrect Authorization 8.7 High -
@fedify/fedifynpm Fedify has an Infinite loop and Blind SSRF found inside the Webfinger mechanism 5.4 Medium -
@fedify/fedifynpm Fedify vulnerable to allowing access to internal network resources 7.2 High