Fedify has ReDoS Vulnerability in HTML Parsing Regex

🗓️ 22 Dec 2025 21:36:55Reported by GitHub Advisory DatabaseType

Fedify's document loader has a ReDoS in the HTML parsing regex with nested quantifiers.

Reporter	Title	Published	Views	Family All 19
Circl	CVE-2025-68475	20 Dec 202504:59	–	circl
CNNVD	Fedify 安全漏洞	22 Dec 202500:00	–	cnnvd
CVE	CVE-2025-68475	22 Dec 202521:31	–	cve
Cvelist	CVE-2025-68475 Fedify has ReDoS Vulnerability in HTML Parsing Regex	22 Dec 202521:31	–	cvelist
EUVD	EUVD-2025-204741	22 Dec 202521:36	–	euvd
NVD	CVE-2025-68475	22 Dec 202522:16	–	nvd
OSV	CVE-2025-68475 Fedify has ReDoS Vulnerability in HTML Parsing Regex	22 Dec 202521:31	–	osv
OSV	GHSA-RCHF-XWX2-HM93 Fedify has ReDoS Vulnerability in HTML Parsing Regex	22 Dec 202521:36	–	osv
Positive Technologies	PT-2025-52723	22 Dec 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-68475	23 Dec 202521:34	–	redhatcve

Vulners

Node

fedify fedify/fedifyRange1.9.0–1.9.2npm

fedify fedify/fedifyRange1.8.0–1.8.15npm

fedify fedify/fedifyRange1.7.0–1.7.14npm

Source	Link
github	www.github.com/fedify-dev/fedify/security/advisories/GHSA-rchf-xwx2-hm93
github	www.github.com/fedify-dev/fedify/commit/2bdcb24d7d6d5886e0214ed504b63a6dc5488779
github	www.github.com/fedify-dev/fedify/commit/bf2f0783634efed2663d1b187dc55461ee1f987a
github	www.github.com/fedify-dev/fedify/releases/tag/1.6.13
github	www.github.com/fedify-dev/fedify/releases/tag/1.7.14
github	www.github.com/fedify-dev/fedify/releases/tag/1.8.15
github	www.github.com/fedify-dev/fedify/releases/tag/1.9.2
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-68475
github	www.github.com/advisories/GHSA-rchf-xwx2-hm93

23 Dec 2025 16:01Current

7.5High risk

Vulners AI Score7.5

CVSS 3.17.5

EPSS0.00481

SSVC