Fedify vulnerabilities
We track 1 vulnerability in Fedify products across 4 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on April 6, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Fedify vulnerabilities
- 7.5 High severity
fedify: Uncontrolled Resource Consumption
Fedify is a TypeScript library for building federated server apps powered by ActivityPub. Prior to 1.9.6, 1.10.5, 2.0.8, and 2.1.1, @fedify/fedify follows HTTP redirects recursively in its remote document loader and authenticated document loader without enforc