TI-2025-42005 CVE-2025-68475 · GHSA-rchf-xwx2-hm93
Fedify has ReDoS Vulnerability in HTML Parsing Regex
Priority HIGH 72
Fedify is a TypeScript library for building federated server apps powered by ActivityPub.
@fedify
Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
@fedify records in CISA KEVNo @fedify vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
1 record in Fedify · all components