Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

npm

@fedify/fedify

npm

An ActivityPub server framework

View on github.com · View on npmjs.org

High Security Advisories for @fedify/fedify in npm Clear Filters

High
25 days ago

Fedify has an incomplete SSRF mitigation after GHSA-p9cg-vqcc-grcx: validatePublicUrl allows special-use IPv4 ranges GSA_kwCzR0hTQS14dzlxLTJtdjYtOWZyOM4ABaxD

npm @fedify/vocab-runtime, @fedify/fedify
High
2 months ago

Fedify has an LD-Signature Bypass via JSON-LD Named-Graph Restructuring GSA_kwCzR0hTQS05cmZnLXY4ZzktOTM2N84ABXa2

npm @fedify/fedify
High
4 months ago

Fedify affected by resource exhaustion caused by unbounded redirect following during remote key/document resolution GSA_kwCzR0hTQS1nbTltLWd3YzQtaHdncM4ABU1p

npm @fedify/fedify, @fedify/vocab-runtime
High
8 months ago

Fedify has ReDoS Vulnerability in HTML Parsing Regex GSA_kwCzR0hTQS1yY2hmLXh3eDItaG05M84ABQDw

npm @fedify/fedify
High
about 1 year ago

@fedify/fedify has Improper Authentication and Incorrect Authorization GSA_kwCzR0hTQS02amNjLXhnY3ItcTNoNM4ABK4B

npm @fedify/fedify

Filter by Severity

High 5 Moderate 2