UpHeron
All vulnerabilities

Servers and applications

GHSA-288h-6j8h-6x5j

Insufficient ActivityPub identifier verification

Severity
Critical
Published
29 Oct 2026
Last changed
29 Oct 2026
Added to UpHeron
3 Nov 2026
Fixed in
4.4.27, 4.5.20, 4.6.10, 4.7.4, 5.0.0-alpha.2
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
MastodonServers and applications · github:mastodon/mastodon
  • Every version before 4.4.27
  • From 4.5.0-alpha.1 before 4.5.20
  • From 4.6.0-alpha.1 before 4.6.10
  • From 4.7.0-alpha.1 before 4.7.4
  • From 4.8.0-alpha.1 before 5.0.0-alpha.2

References