Skip to content
OpenAdvisories

Vendor

dahlia

3 known vulnerabilities.

Products

fedify 2 logtape 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.6
    CVE-2026-54511

    @logtape/syslog: syslog log injection via unescaped control characters and unvalidated SD-NAME keys

    LogTape is an unobtrusive logging library. Prior to 1.3.11, 2.0.14, and 2.1.5, the @logtape/syslog package's escapeStructuredDataValue() function in packages/syslog/src/syslog.ts does not neutralize C0 control characters from U+0000 through U+001F in structur…

    dahlia logtape @logtape/syslog npm
  • High 7.2
    CVE-2024-39687

    Fedify vulnerable to allowing access to internal network resources

    Fedify is a TypeScript library for building federated server apps powered by ActivityPub and other standards. At present, when Fedify needs to retrieve an object or activity from a remote activitypub server, it makes a HTTP request to the `@id` or other resou…

    dahlia fedify @fedify/fedify npm