Meta

1 readers

1 users here now

About

🗞️ FOSSware staff will post regular updates about this instance or other Fediverse topics in this community.

Rules

🧾 General Instance Rules apply

Look at the side bar of the main feed.

👮 Only Staff Members can create Threads here

If you need help or want to ask a question, use /c/fossware_support. Thanks! 😻

🔗 Other Resources

/c/fossware_support for Support

founded 1 year ago

MODERATORS

[email protected]

29

Security Vulnerability detected in Lemmy (4.bp.blogspot.com)

submitted 1 year ago* (last edited 1 year ago) by [email protected] to c/[email protected]

7 comments fedilink hide all child comments

Hey, guys.

Pre-workday-Netto chiming in to inform you that a XSS vulnerability has been found in Lemmy's frontend and that several instances have been compromised.

You can track the issue here.

I implemented the supposed patch and uploaded an ARM64 build that has the patch applied to Docker Hub, if any other instance might need it (use with caution).

Please note that you'll have to log back in, as all active sessions have been terminated.

I'll continue to monitor the situation when I'm at work.

✌️

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 1 points 1 year ago

That's great. A static page where you can post a short message in case of an outage would be nice to have as well.