@fedify/vocab-runtime Security Advisories - Npm | Ecosyste.ms: Advisories

@fedify/vocab-runtime

Runtime library for code-generated Activity Vocabulary APIs

View on github.com · View on npmjs.org

Security Advisories for @fedify/vocab-runtime in npm

High

about 1 month ago

Fedify has an incomplete SSRF mitigation after GHSA-p9cg-vqcc-grcx: validatePublicUrl allows special-use IPv4 ranges GSA_kwCzR0hTQS14dzlxLTJtdjYtOWZyOM4ABaxD

npm @fedify/vocab-runtime, @fedify/fedify

High

5 months ago

Fedify affected by resource exhaustion caused by unbounded redirect following during remote key/document resolution GSA_kwCzR0hTQS1nbTltLWd3YzQtaHdncM4ABU1p

npm @fedify/fedify, @fedify/vocab-runtime

Potential

High

about 1 year ago

@fedify/fedify has Improper Authentication and Incorrect Authorization GSA_kwCzR0hTQS02amNjLXhnY3ItcTNoNM4ABK4B

npm @fedify/fedify

Filter by Severity