Vulnerability Description
Hollo is a federated single-user microblogging software designed to be federated through ActivityPub. Versions prior to 0.6.5 allow HTML form elements to be submitted, making the software vulnerable to HTML injection. Version 0.6.5 fixes the issue.
CVSS Score
MEDIUM
Related Weaknesses (CWE)
References
- https://github.com/fedify-dev/hollo/commit/f9d25e10ba5406c27f9e87dfb01f75b6a52f2
- https://github.com/fedify-dev/hollo/releases/tag/0.6.5
- https://github.com/fedify-dev/hollo/security/advisories/GHSA-w7gc-g3x7-hq8h
- https://github.com/fedify-dev/hollo/security/advisories/GHSA-w7gc-g3x7-hq8h
FAQ
What is CVE-2025-53941?
CVE-2025-53941 is a vulnerability with a CVSS score of 6.1 (MEDIUM). Hollo is a federated single-user microblogging software designed to be federated through ActivityPub. Versions prior to 0.6.5 allow HTML form elements to be submitted, making the software vulnerable t...
How severe is CVE-2025-53941?
CVE-2025-53941 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-53941?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.