| Package | Affected versions | Patched versions |
|---|---|---|
| hollo | ≥ 0.6.0, < 0.6.20≥ 0.7.0, < 0.7.2 | 0.6.200.7.2 |
Hollo is a federated single-user microblogging software designed to be federated through ActivityPub. Prior to 0.6.20 and 0.7.2, there is a security vulnerability where DMs and followers-only posts were exposed through the ActivityPub outbox endpoint without authorization. This vulnerability is fixed in 0.6.20 and 0.7.2.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free