Last night, several Lemmy instances (including lemmy.world) were breached and defaced. More details can be found here: https://lemmy.ml/post/1901079
This breach only affected instances that had custom emoji configured. I hadn't gotten to setting those up yet here, so this instance should not be vulnerable.
A fix for this vulnerability has already been created (https://github.com/LemmyNet/lemmy-ui/pull/1897) and as soon as 0.18.2 is released I will upgrade to it here.
2 Comments
JeffCraig@citizensgaming.com · 1 pts · 3y
0.18.2 upgrade is complete without any issues. Several other bugs I've seen around have also been fixed. It's great to see Lemmy development progressing so quickly!