PatchTheCVEfedify vulnerabilities
Recent CVEs affecting fedify products. 1 tracked.
fedify has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2026-04-06. Highest priority: CVE-2026-34148 (score 48/100).
- CVE-2026-34148 HIGH 7.5 UPGRADE UPGRADE Fedify is a TypeScript library for building federated server apps powered by ActivityPub
FAQ
How do I fix fedify vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is fedify being exploited right now?
None of the tracked fedify CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which fedify CVE should I patch first?
CVE-2026-34148 currently ranks highest (48/100): Fedify is a TypeScript library for building federated server apps powered by ActivityPub.