Skip to content
@fedify vulnerabilities
Newest
-
@fedify fedify
Fedify: Server-Side Request Forgery in getNodeInfo() Allows Access to Internal Network Resources
CVE-2026-62857
8.8 High
-
@fedify fedify, vocab-runtime +1 more
Fedify has an incomplete SSRF mitigation after GHSA-p9cg-vqcc-grcx: validatePublicUrl allows special-use IPv4 ranges
CVE-2026-50131
Public exploitFix available
8.6 High
-
@fedify fedify
Fedify has an LD-Signature Bypass via JSON-LD Named-Graph Restructuring
CVE-2026-42462
Fix available
7.0 High
-
@fedify fedify, vocab-runtime, fedify fedify\/fedify +1 more +3 more
Fedify affected by resource exhaustion caused by unbounded redirect following during remote key/document resolution
CVE-2026-34148
Fix available
7.5 High
-
@fedify fedify
Fedify has ReDoS Vulnerability in HTML Parsing Regex
CVE-2025-68475
Fix available
7.5 High
-
@fedify fedify
@fedify/fedify: Improper Authentication and Incorrect Authorization
CVE-2025-54888
Fix available
8.7 High
-
@fedify fedify
Fedify has an Infinite loop and Blind SSRF found inside the Webfinger mechanism
CVE-2025-23221
Fix available
5.4 Medium
-
@fedify fedify
Fedify vulnerable to allowing access to internal network resources
CVE-2024-39687
Fix available
7.2 High