fedify-dev Vocab Runtime Vulnerabilities

Fedify-dev Vocab-runtime vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

10 June 2026

Fedify has an incomplete SSRF mitigation after GHSA-p9cg-vqcc-grcx: validatePublicUrl allows special-use IPv4 ranges
CVE-2026-50131
Fedify-devFedify8.6HIGH