Lemmy instances have been hacked
Lemmy instances have been hacked
lemmy.world Recap of the Lemmy XSS incident & steps for mitigation - Lemmy.world
# UPDATE: The latest RC version of Lemmy-ui (0.18.2-rc.2) contains fixes for the issue, but if you believe you were vulnerable, you should still rotate your JWT secret after upgrading! Read below for instructions. Removing custom emoji is no longer necessary after upgrading. Original post follows: -...
I'm not sure if programming.dev is affected (doesn't feel like it currently, but I rather note it here, before it is)
0
comments