VYPR

Activitypub Federation Rust

by LemmyNet

Source repositories

CVEs (1)

  • CVE-2026-33693MedMar 27, 2026
    risk 0.35cvss 6.5epss 0.00

    Lemmy is a link aggregator and forum for the fediverse. Prior to version 0.7.0-beta.9, the `v4_is_invalid()` function in `activitypub-federation-rust` (`src/utils.rs`) does not check for `Ipv4Addr::UNSPECIFIED` (0.0.0.0). An unauthenticated attacker controlling a remote domain…