@fedify/fedify
npm · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Fedify affected by resource exhaustion caused by unbounded redirect following during remote key/document resolution | @fedify/fedify@fedify/vocab-runtime | npm | High | Fix reported | |
| Fedify has an LD-Signature Bypass via JSON-LD Named-Graph Restructuring | @fedify/fedify | npm | High | Fix reported | |
| Server Side Request Forgery (SSRF) attack in Fedify | @fedify/fedify | npm | Medium | Fix reported | |
| Fedify has an incomplete SSRF mitigation after GHSA-p9cg-vqcc-grcx: validatePublicUrl allows special-use IPv4 ranges | @fedify/fedify@fedify/vocab-runtime | npm | High | Fix reported | |
| @fedify/fedify has Improper Authentication and Incorrect Authorization | @fedify/fedify | npm | High | Fix reported | |
| Fedify has ReDoS Vulnerability in HTML Parsing Regex | @fedify/fedify | npm | High | Fix reported | |
| Infinite loop and Blind SSRF found inside the Webfinger mechanism in @fedify/fedify | @fedify/fedify | npm | Medium | Fix reported |