{"action":"Upgrade @fedify/fedify to 1.3.20 or later.","affected":[{"fixed":"1.3.20","introduced":"0"},{"fixed":"1.4.13","introduced":"1.4.0-dev.585"},{"fixed":"1.5.5","introduced":"1.5.0-dev.636"},{"fixed":"1.6.8","introduced":"1.6.0-dev.754"},{"fixed":"1.7.9","introduced":"1.7.0-pr.251.885"},{"fixed":"1.8.5","introduced":"1.8.0-dev.909"}],"component":"@fedify/fedify","cve_ids":["CVE-2025-54888"],"ecosystem":"npm","epss":0.00611,"exploited":false,"fixed_versions":["1.3.20","1.4.13","1.5.5","1.6.8","1.7.9","1.8.5"],"ghsa_id":"GHSA-6jcc-xgcr-q3h4","id":"tcs_01M5KF7AEBTG2Q65MPKAT6M12B","modified_at":"2026-02-04T22:38:29.296687Z","published_at":"2025-08-08T14:29:48Z","references":["https://osv.dev/vulnerability/GHSA-6jcc-xgcr-q3h4","https://github.com/fedify-dev/fedify/security/advisories/GHSA-6jcc-xgcr-q3h4","https://nvd.nist.gov/vuln/detail/CVE-2025-54888","https://github.com/fedify-dev/fedify/commit/14a2f8c6d2c3cbc00c3170a86ad3b7b8555c6847","https://github.com/fedify-dev/fedify"],"severity":{"label":"high","score":8.7},"sources":[{"source":"osv","source_id":"GHSA-6jcc-xgcr-q3h4","url":"https://osv.dev/vulnerability/GHSA-6jcc-xgcr-q3h4"},{"source":"nvd","source_id":"CVE-2025-54888","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-54888"}],"summary":"@fedify/fedify has Improper Authentication and Incorrect Authorization"}