npm/webfinger.js CVE-2025-54590: medium 6.9, EPSS 0.71%
webfinger.js Blind SSRF Vulnerability
Action: Upgrade webfinger.js to 2.8.1 or later.
npm i webfinger.js@2.8.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.8.1 | - |
Fixed versions
| 2.8.1 |
Sources
- osv: GHSA-8xq3-w9fx-74rv
- nvd: CVE-2025-54590
- https://github.com/silverbucket/webfinger.js/security/advisories/GHSA-8xq3-w9fx-74rv
- https://github.com/silverbucket/webfinger.js/commit/b5f2f2c957297d25f4d76072963fccaee2e3095a
- https://github.com/silverbucket/webfinger.js
- https://github.com/silverbucket/webfinger.js/releases/tag/v2.8.1
CVE-2025-54590 · published · modified · JSON