sh.itjust.works Main Community

7726 readers

2 users here now

Home of the sh.itjust.works instance.

founded 1 year ago

MODERATORS

Lemmy Security Advisory for Versions < 0.19.1: Private message details leak. [X post from [email protected]] (lemmy.ml)

submitted 10 months ago by Ziggurat to c/main

6 comments fedilink hide all child comments

For those using Private message on Lemmy, there is a major vulnerability. It seems that this instance still runs 18.5

I know that our beloved admins are volunteers and busy, so I don't blame them for not updating, but while waiting for the update be aware that your PM are as public as your comments

you are viewing a single comment's thread
view the rest of the comments

[–] can 4 points 9 months ago* (last edited 9 months ago)

Even with this patched I would not advise stating your phone number expecting full security.

permalink
fedilink
source
parent