CVE-2025-54590

webfinger.js is a TypeScript-based WebFinger client that runs in both browsers and Node.js environments. In versions 2.8.0 and below, the lookup function accepts user addresses for account checking. However, the ActivityPub specification requires preventing access to localhost services in...

CVE-2025-54590

creationtimestamp| type| source ---|---|--- 2025-07-27 17:38:06+00:00| published-proof-of-concept| https://github.com/silverbucket/webfinger.js/security/advisories/GHSA-8xq3-w9fx-74rv...