Fedify

3 CVEs across 4 Fedify products. Browse Fedify vulnerabilities, severities, and proof-of-concept exploits.

Fedify products with known CVEs

ProductCVEs
Fedify1
Fedify\/fedify1
Fedify\/vocab-Runtime1
Hollo1
Fedify CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-34148High7.52026-04-06Fedify is a TypeScript library for building federated server apps powered by ActivityPub. Prior to 1.9.6, 1.10.5, 2.0.8, and 2.1.1, @fedify/fedify follows HTTP…
CVE-2026-25808High7.52026-02-09Hollo is a federated single-user microblogging software designed to be federated through ActivityPub. Prior to 0.6.20 and 0.7.2, there is a security vulnerabil…
CVE-2025-68475High7.52025-12-22Fedify is a TypeScript library for building federated server apps powered by ActivityPub. Prior to versions 1.6.13, 1.7.14, 1.8.15, and 1.9.2, a Regular Expres…