Syntax	Description	Examples
`"` keyword `"`	Finds the string within quotes, including spaces. Case-insensitive. (Escape quotes inside with `\"`)	`"Hackers' Pub"`
`from:` handle	Finds content written by the specified user.	`from:hongminhee` `from:hongminhee@hollo.social`
`lang:` ISO 639-1	Finds content written in the specified language.	`lang:en`
`#` tag	Finds content with the specified tag. Case-insensitive.	`#HackersPub`
condition condition	Finds content that satisfies both conditions on either side of the space (logical AND).	`"Hackers' Pub" lang:en`
condition `OR` condition	Finds content that satisfies at least one of the conditions on either side of the OR operator (logical OR).	`#HackersPub OR "Hackers' Pub" lang:en`
`(` condition `)`	Combines the operators within the parentheses first.	`(#HackersPub OR "Hackers' Pub" OR "Hackers Pub") lang:en`

Week in Fediverse @weekinfediverse@mitra.social

12/26/2025, 4:57:31 PM

Public

Week in Fediverse 2025-12-26

Servers

- Hollo v0.6.19
- Iceshrimp.NET v2025.1-beta5.patch3.security4
- Mitra v4.15.0
- Manyfold v0.130.2
- stegodon v1.3.0
- PieFed v1.4.0
- Lemmy v0.19.15
- Ktistec v3.2.5
- Misskey v2025.12.2
- Castopod v1.13.8
- ActivityPub for WordPress v7.8.2
- NeoDB v0.12.6
- NodeBB v4.7.2
- SquidCity: A tiny ActivityPub (Fediverse) server, written in NodeJS/Typescript

Clients

- Tusker v2025.4
- Photon v2.2.2
- Thunder v0.8.3
- Holos: A Fediverse client that turns your smartphone into a complete ActivityPub server

For developers

- BotKit v0.3.1
- Fedify v1.10.0
- apkit v0.3.5
- FEP MCP: An MCP (Model Context Protocol) server that provides access to Fediverse Enhancement Proposals

Protocol

- FEP-0151: NodeInfo in Fediverse Software (2025 edition) (Final comments)

Articles

- My 2026 Open Social Web Predictions

-----

#WeekInFediverse #Fediverse #ActivityPub

Previous edition: https://mitra.social/objects/019b384b-9d7a-abda-7227-014207339cc2

### Security Update: Hollo 0.6…

### Security Update: Hollo 0.6.19 Released We have released Hollo 0.6.19 to address a security vulnerability in Fedify's HTML parsing code. This vulnerability (CVE-2025-68475) is a ReDoS (Regular Expression Denial of Service) issue that could allow an attacker to cause service unavailability by sending specially crafted HTML responses during federation operations. The malicious payload is small (approximately 170 bytes) but can block the Node.js event loop for extended periods. We strongly recommend all Hollo operators upgrade to version 0.6.19 immediately. | Field | Details | |----------|------------------------------------------------------------------------------------------------| | CVE | [CVE-2025-68475](https://github.com/fedify-dev/fedify/security/advisories/GHSA-rchf-xwx2-hm93) | | Severity | High (CVSS 7.5) | | Action | Upgrade to Hollo 0.6.19 | #Hollo #Security #Fediverse #ActivityPub

hollo.social

If you have a fediverse account, you can quote this note from your own instance. Search https://mitra.social/objects/019b5b98-13e5-ff26-3605-f31d929bf9bf on your instance and quote it. (Note that quoting is not supported in Mastodon.)