Jan Wildeboer 😷:krulorange: on Nostr: Ah, yes. So the security issue that caused the surprise update to #Mastodon 4.2.10 on ...

Ah, yes. So the security issue that caused the surprise update to #Mastodon 4.2.10 on the 4th of July has a name: CVE-2024-37903 Improper authorship check on audience extension for existing posts

More details will be published on the 15th of July.
https://github.com/mastodon/mastodon/security/advisories/GHSA-xjvf-fm67-4qc3