fedify-dev fedify

• CVE-2026-62857 High 8.8 Fedify: Server-Side Request Forgery in getNodeInfo() Allows Access to Internal Network Resources 0.4%
• CVE-2026-50131 High 8.6 Fedify has an incomplete SSRF mitigation after GHSA-p9cg-vqcc-grcx: validatePublicUrl allows special-use IPv4 ranges 0.4%
• CVE-2026-42462 High 7.0 Fedify has an LD-Signature Bypass via JSON-LD Named-Graph Restructuring 0.2%
• CVE-2025-68475 High 7.5 Fedify has ReDoS Vulnerability in HTML Parsing Regex 0.6%
• CVE-2025-54888 High 8.7 @fedify/fedify: Improper Authentication and Incorrect Authorization 0.6%