Lucene search
+L

Fedify has ReDoS Vulnerability in HTML Parsing Regex

πŸ—“οΈΒ 22 Dec 2025Β 21:36:55Reported byΒ GitHub Advisory DatabaseTypeΒ 
github
Β github
πŸ”—Β github.comπŸ‘Β 29Β Views

Fedify's document loader has a ReDoS in the HTML parsing regex with nested quantifiers.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
circl
Circl
CVE-2025-68475
20 Dec 202504:59
–circl
cnnvd
CNNVD
Fedify security vulnerabilities
22 Dec 202500:00
–cnnvd
cve
CVE
CVE-2025-68475
22 Dec 202521:31
–cve
cvelist
Cvelist
CVE-2025-68475 Fedify has ReDoS Vulnerability in HTML Parsing Regex
22 Dec 202521:31
–cvelist
euvd
EUVD
EUVD-2025-204741
22 Dec 202521:36
–euvd
mend
Mend
CVE-2025-68475
22 Dec 202521:31
–mend
nvd
NVD
CVE-2025-68475
22 Dec 202522:16
–nvd
osv_ghsa
osv_ghsa
GHSA-RCHF-XWX2-HM93 Fedify has ReDoS Vulnerability in HTML Parsing Regex
22 Dec 202521:36
–osv_ghsa
ptsecurity
Positive Technologies
PT-2025-52723
22 Dec 202500:00
–ptsecurity
rapid7
Rapid7 Vulnerability Database (full)
CVE-2025-68475: Inefficient Regular Expression Complexity
22 Dec 202500:00
–rapid7
Rows per page
Vulners
Node
OR
fedifyfedify/fedifyRange1.9.0–1.9.2npm
fedifyfedify/fedifyRange1.8.0–1.8.15npm
fedifyfedify/fedifyRange1.7.0–1.7.14npm
fedifyfedify/fedifyRange<1.6.13npm

Data

Build on a solid foundation withΒ Vulners data

WeΒ provide theΒ essential building blocks forΒ cybersecurity solutions withΒ comprehensive, structured, andΒ constantly updated vulnerability andΒ exploits data

Api

Power your application withΒ Vulners API

The Vulners REST API offers reliable, high-performance access toΒ vulnerabilityΒ intelligence, withΒ 99.9%Β SLAΒ uptime andΒ CDN-backed data delivery forΒ seamlessΒ global access

App

Assess and manage vulnerabilities withΒ VulnersΒ tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation