fedify-dev fedify vulnerabilities
5 published CVEs name fedify-dev fedify among the affected products.
- 5Published CVEs5 of them scored
- 4Last 12 monthspublished in the last year
- 0Critical5 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-62857
Fedify: Server-Side Request Forgery in getNodeInfo() Allows Access to Internal Network Resources
fedify-dev · fedify
High8.8 - CVE-2026-50131
Fedify has an incomplete SSRF mitigation after GHSA-p9cg-vqcc-grcx: validatePublicUrl allows special-use IPv4 ranges
fedify-dev · fedify
High8.6 - CVE-2026-42462
Fedify has an LD-Signature Bypass via JSON-LD Named-Graph Restructuring
fedify-dev · fedify
High7.0 - CVE-2025-68475
Fedify has ReDoS Vulnerability in HTML Parsing Regex
fedify-dev · fedify
High7.5 - CVE-2025-54888
@fedify/fedify: Improper Authentication and Incorrect Authorization
fedify-dev · fedify
High8.7