hollo

v0.9.4 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 1mo Communication & Email

✓ No known CVEs patched

This release patches 1 known CVE

Topics

activitypub fediverse microblog

Affected surfaces

rce_ssrf

ReleasePort's take

Moderate signal

editorial:auto 1mo

Fedify was upgraded to version 2.2.4 to fix a security vulnerability affecting its SSRF mitigation.

Why it matters: Addresses CVE‑2026‑50131; operators using the Fedify dependency should upgrade immediately to mitigate risk.

AI summary

Upgraded Fedify to 2.2.4 to address CVE-2026-50131 SSRF mitigation vulnerability.

Type	Severity	Summary	CVE
Security	Critical	Upgraded Fedify to 2.2.4 to address a security vulnerability in SSRF mitigation. Upgraded Fedify to 2.2.4 to address a security vulnerability in SSRF mitigation. Source: llm_adapter@2026-06-04 Confidence: high	—

Full changelog

Released on June 4, 2026.

Upgraded Fedify to 2.2.4 to address a security vulnerability in SSRF mitigation. [CVE-2026-50131]

CVE-2026-50131 — SSRF mitigation vulnerability fixed in Fedify by upgrading to version 2.2.4

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track hollo

Get notified when new releases ship.

About hollo

Federated single-user microblogging software