Ddahlia

Products

Exploited and recent CVEs

• CVE-2026-54511 High 8.6 @logtape/syslog: syslog log injection via unescaped control characters and unvalidated SD-NAME keys 0.5%
• CVE-2025-23221 Medium 5.4 Fedify has an Infinite loop and Blind SSRF found inside the Webfinger mechanism 0.6%
• CVE-2024-39687 High 7.2 Fedify vulnerable to allowing access to internal network resources 0.6%