@fedify/vocab-runtime
npm · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Fedify affected by resource exhaustion caused by unbounded redirect following during remote key/document resolution | @fedify/fedify@fedify/vocab-runtime | npm | High | Fix reported | |
| Fedify has an incomplete SSRF mitigation after GHSA-p9cg-vqcc-grcx: validatePublicUrl allows special-use IPv4 ranges | @fedify/fedify@fedify/vocab-runtime | npm | High | Fix reported |