Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

npm

@fedify/fedify

npm

An ActivityPub server framework

View on github.com · View on npmjs.org

Security Advisories for @fedify/fedify in npm

High
about 1 month ago

Fedify has an incomplete SSRF mitigation after GHSA-p9cg-vqcc-grcx: validatePublicUrl allows special-use IPv4 ranges GSA_kwCzR0hTQS14dzlxLTJtdjYtOWZyOM4ABaxD

npm @fedify/vocab-runtime, @fedify/fedify
High
3 months ago

Fedify has an LD-Signature Bypass via JSON-LD Named-Graph Restructuring GSA_kwCzR0hTQS05cmZnLXY4ZzktOTM2N84ABXa2

npm @fedify/fedify
High
5 months ago

Fedify affected by resource exhaustion caused by unbounded redirect following during remote key/document resolution GSA_kwCzR0hTQS1nbTltLWd3YzQtaHdncM4ABU1p

npm @fedify/vocab-runtime, @fedify/fedify
High
8 months ago

Fedify has ReDoS Vulnerability in HTML Parsing Regex GSA_kwCzR0hTQS1yY2hmLXh3eDItaG05M84ABQDw

npm @fedify/fedify
High
about 1 year ago

@fedify/fedify has Improper Authentication and Incorrect Authorization GSA_kwCzR0hTQS02amNjLXhnY3ItcTNoNM4ABK4B

npm @fedify/fedify
Moderate
over 1 year ago

Infinite loop and Blind SSRF found inside the Webfinger mechanism in @fedify/fedify GSA_kwCzR0hTQS1jNTlwLXdxNjctMjR3eM4ABDov

npm @fedify/fedify
Moderate
about 2 years ago

Server Side Request Forgery (SSRF) attack in Fedify GSA_kwCzR0hTQS1wOWNnLXZxY2MtZ3JjeM4AA9m5

npm @fedify/fedify

Filter by Severity

High 5 Moderate 2