Fedify (Fedify-dev) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-08-06. Vendor: Fedify-dev.

CVEs of Fedify

• CVE-2026-62857 - CVSS 8.8 (high), 2026-08-06: Fedify is a TypeScript library for building federated server apps powered by ActivityPub. From version 1.2.0 through the affected 1.9, 1.10, 2.0, 2.1, 2.2,…
• CVE-2026-50131 - CVSS 8.6 (high), 2026-06-10: Fedify is a TypeScript library for building federated server apps powered by ActivityPub. Fedify previously addressed SSRF/internal network access in…
• CVE-2026-42462 - CVSS 7 (high), 2026-06-10: Fedify is a TypeScript library for building federated server apps powered by ActivityPub. Prior to versions 1.9.11, 1.10.10, 2.0.18, 2.1.14, and 2.2.3, an…
• CVE-2025-68475 - CVSS 7.5 (high), 2025-12-22: Fedify is a TypeScript library for building federated server apps powered by ActivityPub. Prior to versions 1.6.13, 1.7.14, 1.8.15, and 1.9.2, a Regular…
• CVE-2025-54888 - CVSS 8.7 (high), 2025-08-09: Fedify is a TypeScript library for building federated server apps powered by ActivityPub. In versions below 1.3.20, 1.4.0-dev.585 through 1.4.12,…