TI-2025-34361 CVE-2025-54590 · GHSA-8xq3-w9fx-74rv
webfinger.js is vulnerable to Blind SSRF attacks through localhost
Priority HIGH 70
webfinger.js is a TypeScript-based WebFinger client that runs in both browsers and Node.js environments.
silverbucket
Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
silverbucket records in CISA KEVNo silverbucket vulnerabilities are listed in CISA KEV.
Records
1 record