Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

192 matches found

vulnersOsv
vulnersOsv•added 2026/07/14 6:15 p.m.•2 views

@fedify/botkit (>=0.4.0-dev.177, <=0.4.0-dev.181), @fedify/botkit-sqlite (>=0.4.0-dev.177, <=0.4.0-dev.181) potentially affected by CVE-2026-50131 via @fedify/fedify (1.10.0)

@fedify/fedify NPM version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on @fedify/fedify and may be impacted: - @fedify/botkit =0.4.0-dev.177, =0.4.0-dev.177, =0.4.0-dev.181 Source cves: CVE-2026-50131 Source advisory: GHSA-XW9Q-2MV6-9FR8...

8.6CVSS5.8AI score0.00422EPSS
SaveExploits1
vulnersOsv
vulnersOsv•added 2026/07/14 6:15 p.m.•1 views

@fedify/botkit (>=0.4.0-dev.184, <=0.5.0-dev.205), @fedify/botkit-sqlite (>=0.4.0-dev.184, <=0.5.0-dev.205) +1 more potentially affected by CVE-2026-50131 via @fedify/fedify (>=2.1.0, <=2.1.14)

@fedify/fedify NPM version =2.1.0, =0.4.0-dev.184, =0.4.0-dev.184, =2.1.0, =2.1.14 Source cves: CVE-2026-50131 Source advisory: GHSA-XW9Q-2MV6-9FR8...

8.6CVSS5.8AI score0.00422EPSS
SaveExploits1
vulnersOsv
vulnersOsv•added 2026/07/14 6:15 p.m.•1 views

@fedify/cli (>=2.2.0, <=2.2.3) potentially affected by CVE-2026-50131 via @fedify/fedify (>=2.2.0, <=2.2.3)

@fedify/fedify NPM version =2.2.0, =2.2.0, =2.2.3 Source cves: CVE-2026-50131 Source advisory: GHSA-XW9Q-2MV6-9FR8...

8.6CVSS5.8AI score0.00422EPSS
SaveExploits1
vulnersOsv
vulnersOsv•added 2026/07/14 6:15 p.m.•3 views

@fedify/botkit (>=0.4.0-dev.184, <=0.5.0-dev.205), @fedify/botkit-sqlite (>=0.4.0-dev.184, <=0.5.0-dev.205) +5 more potentially affected by CVE-2026-50131 via @fedify/vocab-runtime (>=2.1.0, <=2.1.14)

@fedify/vocab-runtime NPM version =2.1.0, =0.4.0-dev.184, =0.4.0-dev.184, =2.1.0, =2.1.0, =2.1.0, =2.1.0, =2.1.0, =2.1.14 Source cves: CVE-2026-50131 Source advisory: GHSA-XW9Q-2MV6-9FR8...

8.6CVSS5.8AI score0.00422EPSS
SaveExploits1
osv_ghsa
osv_ghsa•added 2026/07/14 6:15 p.m.•37 views

GHSA-XW9Q-2MV6-9FR8 Fedify has an incomplete SSRF mitigation after GHSA-p9cg-vqcc-grcx: validatePublicUrl allows special-use IPv4 ranges

Summary Fedify previously addressed SSRF/internal network access in GHSA-p9cg-vqcc-grcx by adding public URL validation before runtime document and media fetching. However, the current IPv4 validation logic appears incomplete. The validatePublicUrl protection relies on isValidPublicIPv4Address to...

8.6CVSS5.8AI score0.00422EPSS
SaveExploits1References3
vulnersOsv
vulnersOsv•added 2026/07/14 6:15 p.m.•3 views

@fedify/botkit (>=0.4.0-dev.182, <=0.4.0-dev.183), @fedify/botkit-sqlite (>=0.4.0-dev.182, <=0.4.0-dev.183) +1 more potentially affected by CVE-2026-50131 via @fedify/fedify (>=2.0.0, <=2.0.18)

@fedify/fedify NPM version =2.0.0, =0.4.0-dev.182, =0.4.0-dev.182, =2.0.0, =2.0.18 Source cves: CVE-2026-50131 Source advisory: GHSA-XW9Q-2MV6-9FR8...

8.6CVSS5.8AI score0.00422EPSS
SaveExploits1
vulnersOsv
vulnersOsv•added 2026/07/14 6:15 p.m.•15 views

@fedify/botkit (>=0.4.0-dev.184, <=0.5.0-dev.205), @fedify/botkit-sqlite (>=0.4.0-dev.184, <=0.5.0-dev.205) +1 more potentially affected by CVE-2026-50131 via @fedify/fedify (>=2.1.0, <=2.1.14)

@fedify/fedify NPM version =2.1.0, =0.4.0-dev.184, =0.4.0-dev.184, =2.1.0, =2.1.14 Source cves: CVE-2026-50131 Source advisory: OSV:GHSA-XW9Q-2MV6-9FR8...

8.6CVSS5.8AI score0.00422EPSS
SaveExploits1
vulnersOsv
vulnersOsv•added 2026/07/14 6:15 p.m.•2 views

@fedify/cli (>=2.2.0, <=2.2.3) potentially affected by CVE-2026-50131 via @fedify/fedify (>=2.2.0, <=2.2.3)

@fedify/fedify NPM version =2.2.0, =2.2.0, =2.2.3 Source cves: CVE-2026-50131 Source advisory: OSV:GHSA-XW9Q-2MV6-9FR8...

8.6CVSS5.8AI score0.00422EPSS
SaveExploits1
vulnersOsv
vulnersOsv•added 2026/07/14 6:15 p.m.•17 views

@fedify/botkit (>=0.4.0-dev.182, <=0.4.0-dev.183), @fedify/botkit-sqlite (>=0.4.0-dev.182, <=0.4.0-dev.183) +1 more potentially affected by CVE-2026-50131 via @fedify/fedify (>=2.0.0, <=2.0.18)

@fedify/fedify NPM version =2.0.0, =0.4.0-dev.182, =0.4.0-dev.182, =2.0.0, =2.0.18 Source cves: CVE-2026-50131 Source advisory: OSV:GHSA-XW9Q-2MV6-9FR8...

8.6CVSS5.8AI score0.00422EPSS
SaveExploits1
EUVD
EUVD•added 2026/07/14 6:15 p.m.•35 views

EUVD-2026-36132

Fedify has an incomplete SSRF mitigation after GHSA-p9cg-vqcc-grcx: validatePublicUrl allows special-use IPv4 ranges...

8.6CVSS5.8AI score0.00422EPSS
SaveExploits1References2
vulnersOsv
vulnersOsv•added 2026/07/14 6:15 p.m.•17 views

@fedify/botkit (>=0.4.0-dev.177, <=0.4.0-dev.181), @fedify/botkit-sqlite (>=0.4.0-dev.177, <=0.4.0-dev.181) potentially affected by CVE-2026-50131 via @fedify/fedify (1.10.0)

@fedify/fedify NPM version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on @fedify/fedify and may be impacted: - @fedify/botkit =0.4.0-dev.177, =0.4.0-dev.177, =0.4.0-dev.181 Source cves: CVE-2026-50131 Source advisory: OSV:GHSA-XW9Q-2MV6-9FR8...

8.6CVSS5.8AI score0.00422EPSS
SaveExploits1
vulnersOsv
vulnersOsv•added 2026/07/14 6:15 p.m.•2 views

@fedify/amqp (0.2.0-dev.12), @fedify/botkit (>=0.3.0-dev.125, <=0.4.0-dev.175) +3 more potentially affected by CVE-2026-50131 via @fedify/fedify (>=1.5.0-dev.732, <=1.9.2)

@fedify/fedify NPM version =1.5.0-dev.732, =0.3.0-dev.125, =0.4.0-dev.167, =0.3.0-dev.20, =0.4.0-dev.18, =0.4.0 Source cves: CVE-2026-50131 Source advisory: OSV:GHSA-XW9Q-2MV6-9FR8...

8.6CVSS5.8AI score0.00422EPSS
SaveExploits1
vulnersOsv
vulnersOsv•added 2026/07/14 6:15 p.m.•14 views

@fedify/botkit (>=0.4.0-dev.184, <=0.5.0-dev.205), @fedify/botkit-sqlite (>=0.4.0-dev.184, <=0.5.0-dev.205) +5 more potentially affected by CVE-2026-50131 via @fedify/vocab-runtime (>=2.1.0, <=2.1.14)

@fedify/vocab-runtime NPM version =2.1.0, =0.4.0-dev.184, =0.4.0-dev.184, =2.1.0, =2.1.0, =2.1.0, =2.1.0, =2.1.0, =2.1.14 Source cves: CVE-2026-50131 Source advisory: OSV:GHSA-XW9Q-2MV6-9FR8...

8.6CVSS5.8AI score0.00422EPSS
SaveExploits1
vulnersOsv
vulnersOsv•added 2026/07/14 6:15 p.m.•3 views

@fedify/cli (>=2.2.0, <=2.2.3), @fedify/fedify (>=2.2.0, <=2.2.3) +3 more potentially affected by CVE-2026-50131 via @fedify/vocab-runtime (>=2.2.0, <=2.2.3)

@fedify/vocab-runtime NPM version =2.2.0, =2.2.0, =2.2.0, =2.2.0, =2.2.0, =2.2.0, =2.2.3 Source cves: CVE-2026-50131 Source advisory: OSV:GHSA-XW9Q-2MV6-9FR8...

8.6CVSS5.8AI score0.00422EPSS
SaveExploits1
vulnersOsv
vulnersOsv•added 2026/07/14 6:15 p.m.•4 views

@fedify/botkit (>=0.4.0-dev.182, <=0.4.0-dev.183), @fedify/botkit-sqlite (>=0.4.0-dev.182, <=0.4.0-dev.183) +5 more potentially affected by CVE-2026-50131 via @fedify/vocab-runtime (>=2.0.0-dev.12, <=2.0.18)

@fedify/vocab-runtime NPM version =2.0.0-dev.12, =0.4.0-dev.182, =0.4.0-dev.182, =2.0.0-dev.1757, =2.0.0-dev.12, =2.0.0-dev.158, =2.0.0-dev.0, =2.0.0-dev.0, =2.0.18 Source cves: CVE-2026-50131 Source advisory: OSV:GHSA-XW9Q-2MV6-9FR8...

8.6CVSS5.8AI score0.00422EPSS
SaveExploits1
NVD
NVD•added 2026/06/10 10:17 p.m.•28 views

CVE-2026-50131

Fedify is a TypeScript library for building federated server apps powered by ActivityPub. Fedify previously addressed SSRF/internal network access in GHSA-p9cg-vqcc-grcx by adding public URL validation before runtime document and media fetching. However, the IPv4 validation logic present starting...

8.6CVSS0.00422EPSS
SaveExploits1References1
NVD
NVD•added 2026/06/10 10:16 p.m.•27 views

CVE-2026-42462

Fedify is a TypeScript library for building federated server apps powered by ActivityPub. Prior to versions 1.9.11, 1.10.10, 2.0.18, 2.1.14, and 2.2.3, an attacker can make use of JSON-LD features to restructure a JSON-LD document that would change how Fedify interprets it without changing its...

7CVSS0.00249EPSS
SaveExploits0References2
vulnersOsv
vulnersOsv•added 2026/06/10 10:15 p.m.•3 views

@fedify/amqp (0.2.0-dev.12), @fedify/botkit (>=0.3.0-dev.125, <=0.4.0-dev.175) +3 more potentially affected by CVE-2026-50131 via @fedify/fedify (>=1.5.0-dev.732, <=1.9.2)

@fedify/fedify NPM version =1.5.0-dev.732, =0.3.0-dev.125, =0.4.0-dev.167, =0.3.0-dev.20, =0.4.0-dev.18, =0.4.0 Source cves: CVE-2026-50131 Source advisory: SNYK:JS-FEDIFYFEDIFY-17954864...

8.6CVSS5.8AI score0.00422EPSS
SaveExploits1
vulnersOsv
vulnersOsv•added 2026/06/10 10:15 p.m.•2 views

@fedify/cli (>=2.2.0, <=2.2.3), @fedify/fedify (>=2.2.0, <=2.2.3) +3 more potentially affected by CVE-2026-50131 via @fedify/vocab-runtime (>=2.2.0, <=2.2.3)

@fedify/vocab-runtime NPM version =2.2.0, =2.2.0, =2.2.0, =2.2.0, =2.2.0, =2.2.0, =2.2.3 Source cves: CVE-2026-50131 Source advisory: SNYK:JS-FEDIFYVOCABRUNTIME-17954863...

8.6CVSS5.8AI score0.00422EPSS
SaveExploits1
vulnersOsv
vulnersOsv•added 2026/06/10 10:15 p.m.•10 views

@fedify/botkit (>=0.4.0-dev.184, <=0.5.0-dev.205), @fedify/botkit-sqlite (>=0.4.0-dev.184, <=0.5.0-dev.205) +5 more potentially affected by CVE-2026-50131 via @fedify/vocab-runtime (>=2.1.0, <=2.1.14)

@fedify/vocab-runtime NPM version =2.1.0, =0.4.0-dev.184, =0.4.0-dev.184, =2.1.0, =2.1.0, =2.1.0, =2.1.0, =2.1.0, =2.1.14 Source cves: CVE-2026-50131 Source advisory: SNYK:JS-FEDIFYVOCABRUNTIME-17954863...

8.6CVSS5.8AI score0.00422EPSS
SaveExploits1
Rows per page
Query Builder