Vulnerabilities

TI-2026-39357 CVE-2026-54511 · GHSA-8h6h-x5pq-56fq

@logtape/syslog: syslog log injection via unescaped control characters and unvalidated SD-NAME keys

MEDIUM 44

LogTape is an unobtrusive logging library.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00476 Published 2026-08-26 Fixed in 1.3.11, 2.0.14 +1 CWE-117

TI-2025-17006 CVE-2025-23221 · GHSA-c59p-wq67-24wx

MEDIUM 58

Fedify is a TypeScript library for building federated server apps powered by ActivityPub and other standards.

CVSS 3.1MEDIUM 5.4 Network No auth No interaction EPSS 0.00618 Published 2025-01-20 Fixed in 1.0.14, 1.1.11 +2 CWE-835

TI-2024-26611 CVE-2024-39687 · GHSA-p9cg-vqcc-grcx

LOW 39

Fedify is a TypeScript library for building federated server apps powered by ActivityPub and other standards.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.006 Published 2024-07-05 Fixed in 0.9.2, 0.10.2 +1 CWE-918