Fedify-dev Vocab-runtime vulnerabilities

• @fedify fedify, vocab-runtime +1 more Fedify has an incomplete SSRF mitigation after GHSA-p9cg-vqcc-grcx: validatePublicUrl allows special-use IPv4 ranges CVE-2026-50131 Public exploitFix available 8.6 HighJune 10, 2026