Fedify has an LD-Signature Bypass via JSON-LD Named-Graph Restructuring

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

CVE-2026-42462 · CVE overview and exploitation status

EUVD-2026-36127

GHSA-9rfg-v8g9-9367

cve-program · CVE-2026-42462

• https://github.com/fedify-dev/fedify/security/advisories/GHSA-9rfg-v8g9-9367
• https://github.com/fedify-dev/fedify/releases/tag/2.2.3

euvd · EUVD-2026-36127

• https://github.com/fedify-dev/fedify/security/advisories/GHSA-9rfg-v8g9-9367
• https://github.com/fedify-dev/fedify/releases/tag/2.2.3

nvd · CVE-2026-42462

• https://github.com/fedify-dev/fedify/releases/tag/2.2.3
• https://github.com/fedify-dev/fedify/security/advisories/GHSA-9rfg-v8g9-9367

osv · GHSA-9rfg-v8g9-9367

• https://github.com/fedify-dev/fedify/security/advisories/GHSA-9rfg-v8g9-9367
• https://nvd.nist.gov/vuln/detail/CVE-2026-42462
• https://github.com/fedify-dev/fedify
• https://github.com/fedify-dev/fedify/releases/tag/2.2.3

No related changes are available here.