Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

fedify — Vulnerabilities & Security Advisories 7

All 7 CVE vulnerabilities found in fedify, with AI-generated Chinese analysis, references, and POCs.

Vendor: dahlia

CVE IDTitleCVSSSeverityPublished
CVE-2026-50131 Fedify has an incomplete SSRF mitigation after GHSA-p9cg-vqcc-grcx: validatePublicUrl allows special-use IPv4 ranges CWE-918 8.6 High2026-06-10
CVE-2026-42462 Fedify has an LD-Signature Bypass via JSON-LD Named-Graph Restructuring CWE-180 7.0 High2026-06-10
CVE-2026-34148 Fedify affected by resource exhaustion caused by unbounded redirect following during remote key/document resolution CWE-400 7.5 High2026-04-06
CVE-2025-68475 Fedify has ReDoS Vulnerability in HTML Parsing Regex CWE-1333 7.5 High2025-12-22
CVE-2025-54888 @fedify/fedify: Improper Authentication and Incorrect Authorization CWE-287 9.8 -2025-08-09
CVE-2025-23221 Fedify has an Infinite loop and Blind SSRF found inside the Webfinger mechanism CWE-835 5.4 Medium2025-01-20
CVE-2024-39687 Fedify vulnerable to allowing access to internal network resources CWE-918 7.2 High2024-07-05

All 7 known CVE vulnerabilities affecting fedify with full Chinese analysis, references, and POCs where available.