npm/@fedify/fedify CVE-2025-54888: high, EPSS 0.61%
@fedify/fedify has Improper Authentication and Incorrect Authorization
Action: Upgrade @fedify/fedify to 1.3.20 or later.
npm i @fedify/fedify@1.3.20npm i @fedify/fedify@1.4.13npm i @fedify/fedify@1.5.5npm i @fedify/fedify@1.6.8npm i @fedify/fedify@1.7.9npm i @fedify/fedify@1.8.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.3.20 | - |
| 1.4.0-dev.585 | 1.4.13 | - |
| 1.5.0-dev.636 | 1.5.5 | - |
| 1.6.0-dev.754 | 1.6.8 | - |
| 1.7.0-pr.251.885 | 1.7.9 | - |
| 1.8.0-dev.909 | 1.8.5 | - |
Fixed versions
| 1.3.20 | 1.4.13 | 1.5.5 | 1.6.8 | 1.7.9 | 1.8.5 |
Sources
- osv: GHSA-6jcc-xgcr-q3h4
- https://github.com/fedify-dev/fedify/security/advisories/GHSA-6jcc-xgcr-q3h4
- https://nvd.nist.gov/vuln/detail/CVE-2025-54888
- https://github.com/fedify-dev/fedify/commit/14a2f8c6d2c3cbc00c3170a86ad3b7b8555c6847
- https://github.com/fedify-dev/fedify
CVE-2025-54888 · published · modified · JSON