oatmilkmaid@possumpat.iotosh.itjust.works Main Community@sh.itjust.works•[Announcement] TheDude has upgraded the server from 0.18.0 to 0.18.1 RCEnglish
4·
1 year agoGood work Mr. Dude
Good work Mr. Dude
Gotta respect the timing on that one. That was a capital P Pounce.
sh.itjust.works doesn’t have custom emojis and so is fairly safe from this specific exploit. Only local users of instances with custom emojis were at risk if they had visited a malicious page on their home instance.
Lemmy-ui pushed a fix for this vulnerability just 8 minutes ago, so we’ll see if that makes it here.