Fedify-Dev
6 CVEs across 3 Fedify-Dev products. Browse Fedify-Dev vulnerabilities, severities, and proof-of-concept exploits.
Fedify-Dev products with known CVEs
Fedify-Dev CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-62857 | | | 2026-08-06 | Fedify is a TypeScript library for building federated server apps powered by ActivityPub. From version 1.2.0 through the affected 1.9, 1.10, 2.0, 2.1, 2.2, and… |
CVE-2026-50131 | High | 8.6 | 2026-06-10 | Fedify is a TypeScript library for building federated server apps powered by ActivityPub. Fedify previously addressed SSRF/internal network access in GHSA-p9cg… |
CVE-2026-42462 | High | 7.0 | 2026-06-10 | Fedify is a TypeScript library for building federated server apps powered by ActivityPub. Prior to versions 1.9.11, 1.10.10, 2.0.18, 2.1.14, and 2.2.3, an atta… |
CVE-2026-25808 | High | 7.5 | 2026-02-09 | Hollo is a federated single-user microblogging software designed to be federated through ActivityPub. Prior to 0.6.20 and 0.7.2, there is a security vulnerabil… |
CVE-2025-68475 | High | 7.5 | 2025-12-22 | Fedify is a TypeScript library for building federated server apps powered by ActivityPub. Prior to versions 1.6.13, 1.7.14, 1.8.15, and 1.9.2, a Regular Expres… |
CVE-2025-54888 | | | 2025-08-09 | Fedify is a TypeScript library for building federated server apps powered by ActivityPub. In versions below 1.3.20, 1.4.0-dev.585 through 1.4.12, 1.5.0-dev.636… |
CVE-2025-53941 | Medium | 6.1 | 2025-07-17 | Hollo is a federated single-user microblogging software designed to be federated through ActivityPub. Versions prior to 0.6.5 allow HTML form elements to be su… |