Log in Start free

fedify-dev

Products

ProductCVEsExploitedLatest
fedify5–Aug 6, 2026
hollo2–Feb 9, 2026
vocab-runtime1–Jun 10, 2026

Exploited and recent CVEs

  • CVE-2026-62857 High 8.8 Fedify: Server-Side Request Forgery in getNodeInfo() Allows Access to Internal Network Resources 0.4%
  • CVE-2026-50131 High 8.6 Fedify has an incomplete SSRF mitigation after GHSA-p9cg-vqcc-grcx: validatePublicUrl allows special-use IPv4 ranges 0.4%
  • CVE-2026-50131 High 8.6 Fedify has an incomplete SSRF mitigation after GHSA-p9cg-vqcc-grcx: validatePublicUrl allows special-use IPv4 ranges 0.4%
  • CVE-2026-42462 High 7.0 Fedify has an LD-Signature Bypass via JSON-LD Named-Graph Restructuring 0.2%
  • CVE-2026-25808 High 7.5 Hollo DMs get leaked and can be seen on Webfinger Browser 0.5%
  • CVE-2025-68475 High 7.5 Fedify has ReDoS Vulnerability in HTML Parsing Regex 0.6%
  • CVE-2025-54888 High 8.7 @fedify/fedify: Improper Authentication and Incorrect Authorization 0.6%
  • CVE-2025-53941 Medium 6.1 Hollo renders posts received with form elements and allows submission 0.3%