Skip to content
Threat Feed

Tag

Fedify

1 brief RSS
medium advisory

Fedify LD-Signature Bypass via JSON-LD Named-Graph Restructuring

Fedify is vulnerable to CVE-2026-42462, a Linked Data Signature bypass via JSON-LD Named-Graph Restructuring, allowing attackers to alter third-party signed activities by manipulating the document structure without invalidating the signature, potentially leading to integrity, availability, and confidentiality issues.

@fedify/fedify fedify ld-signature-bypass json-ld cve-2026-42462
2r