This release includes 1 security fix for security teams reviewing exposed deployments.
Topics
Affected surfaces
ReleasePort's take
Moderate signalThe release upgrades Fedify to version 2.1.15 to fix an SSRF vulnerability.
Why it matters: Upgrade Fedify to 2.1.15 immediately if you use the Fedify dependency; it resolves a high‑severity (90) security issue affecting server‑side request forgery mitigation.
Summary
AI summaryFixed SSRF vulnerability in Fedify by upgrading to version 2.1.15.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Security | Critical |
Upgraded Fedify to 2.1.15 to address a security vulnerability in SSRF mitigation. Upgraded Fedify to 2.1.15 to address a security vulnerability in SSRF mitigation. Source: llm_adapter@2026-06-04 Confidence: high |
— |
Full changelog
Released on June 4, 2026.
- Upgraded Fedify to 2.1.15 to address a security vulnerability in SSRF mitigation. [CVE-2026-50131]
Security Fixes
- CVE-2026-50131 — SSRF mitigation vulnerability fixed in Fedify by upgrading to 2.1.15
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Beta — feedback welcome: [email protected]