Skip to content
OpenAdvisories

Vendor

dahlia

3 known vulnerabilities.

Products

fedify 2 logtape 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2025-23221

    Fedify has an Infinite loop and Blind SSRF found inside the Webfinger mechanism

    Fedify is a TypeScript library for building federated server apps powered by ActivityPub and other standards. This vulnerability allows a user to maneuver the Webfinger mechanism to perform a GET request to any internal resource on any Host, Port, URL combina…

    dahlia fedify @fedify/fedify npm