Dahlia vulnerabilities
We track 2 vulnerabilities in Dahlia products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 26, 2026.
2vulnerabilities
0critical
2high
0exploited
7.9average CVSS score
Latest Dahlia vulnerabilities
- 8.6 High severity
logtape: Improper Neutralization of CRLF Sequences
LogTape is an unobtrusive logging library. Prior to 1.3.11, 2.0.14, and 2.1.5, the @logtape/syslog package's escapeStructuredDataValue() function in packages/syslog/src/syslog.ts does not neutralize C0 control characters from U+0000 through U+001F in structure
- 7.2 High severity
fedify: Server-Side Request Forgery
Fedify is a TypeScript library for building federated server apps powered by ActivityPub and other standards. At present, when Fedify needs to retrieve an object or activity from a remote activitypub server, it makes a HTTP request to the `@id` or other resour