search

YunoHost-Apps / lemmy_ynh

A link aggregator for the fediverse.
https://join.lemmy.ml
GNU General Public License v3.0
19 stars 12 forks source link

Release 0.18.1 fixes a cross-site scripting vulnerability #58

Closed jahway603 closed 1 year ago

jahway603 commented 1 year ago

Release 0.18.1 fixes a cross-site scripting vulnerability https://github.com/LemmyNet/lemmy/releases/tag/0.18.1

"Additionally this version includes a fix for another cross-site scripting vulnerability. For these reasons instance admins should upgrade as soon as possible." -- https://lemmy.ml/post/1808829

jahway603 commented 1 year ago

Related to Issue https://github.com/YunoHost-Apps/lemmy_ynh/issues/34

jahway603 commented 1 year ago

Lemmy.world was recently hacked & defaced by this serious vulnerability. How many Yunohost instances will be hacked before this is worked on & fixed?

ericgaspar commented 1 year ago

As you can see, #50 failed and I don't know how to fix this...