Fedify 1.9.2
Released on December 20, 2025.
@fedify/fedify
- Fixed a ReDoS (Regular Expression Denial of Service) vulnerability in the document loader's HTML parsing. An attacker-controlled server could respond with a malicious HTML payload that blocked the event loop. [CVE-2025-68475]
@fedify/sqlite
- Fixed
SyntaxError: Identifier 'Temporal' has already been declarederror that occurred when usingSqliteKvStoreon Node.js or Bun. The error was caused by duplicateTemporalimports during the build process. [#487]