@fedify/vocab-runtime vulnerabilities (npm)
2 vulnerabilities.
-
@fedify/vocab-runtimenpm Fedify has an incomplete SSRF mitigation after GHSA-p9cg-vqcc-grcx: validatePublicUrl allows special-use IPv4 ranges 8.6 High -
@fedify/vocab-runtimenpm Fedify affected by resource exhaustion caused by unbounded redirect following during remote key/document resolution 7.5 High