Lucene search
+L

Fedify has ReDoS Vulnerability in HTML Parsing Regex

๐Ÿ—“๏ธย 22 Dec 2025ย 21:36:55Reported byย GitHub Advisory DatabaseTypeย 
github
ย github
๐Ÿ”—ย github.com๐Ÿ‘ย 12ย Views

Fedify's document loader has a ReDoS in the HTML parsing regex with nested quantifiers.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
circl
Circl
CVE-2025-68475
20 Dec 202504:59
โ€“circl
cnnvd
CNNVD
Fedify ๅฎ‰ๅ…จๆผๆดž
22 Dec 202500:00
โ€“cnnvd
cve
CVE
CVE-2025-68475
22 Dec 202521:31
โ€“cve
cvelist
Cvelist
CVE-2025-68475 Fedify has ReDoS Vulnerability in HTML Parsing Regex
22 Dec 202521:31
โ€“cvelist
euvd
EUVD
EUVD-2025-204741
22 Dec 202521:36
โ€“euvd
nvd
NVD
CVE-2025-68475
22 Dec 202522:16
โ€“nvd
osv
OSV
GHSA-RCHF-XWX2-HM93 Fedify has ReDoS Vulnerability in HTML Parsing Regex
22 Dec 202521:36
โ€“osv
ptsecurity
Positive Technologies
PT-2025-52723
22 Dec 202500:00
โ€“ptsecurity
redhatcve
RedhatCVE
CVE-2025-68475
23 Dec 202521:34
โ€“redhatcve
snyk
Snyk
Regular Expression Denial of Service (ReDoS)
22 Dec 202521:36
โ€“snyk
Rows per page
Vulners
Node
OR
fedifyfedify/fedifyRange1.9.0โ€“1.9.2npm
fedifyfedify/fedifyRange1.8.0โ€“1.8.15npm
fedifyfedify/fedifyRange1.7.0โ€“1.7.14npm
fedifyfedify/fedifyRange<1.6.13npm

Data

Build on a solid foundation withย Vulners data

Weย provide theย essential building blocks forย cybersecurity solutions withย comprehensive, structured, andย constantly updated vulnerability andย exploits data

Api

Power your application withย Vulners API

The Vulners REST API offers reliable, high-performance access toย vulnerabilityย intelligence, withย 99.9%ย SLAย uptime andย CDN-backed data delivery forย seamlessย global access

App

Assess and manage vulnerabilities withย Vulnersย tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

23 Dec 2025 16:01Current
7.5High risk
Vulners AI Score7.5
CVSS 3.17.5
EPSS0.00489
SSVC
12