whats the misskey vuln actually imply ? like . what is it . where can i read abt it .
@[email protected] I'm not sure if it's fully disclosed yet
how is it not disclosed if a fix is out ??
@[email protected] sharkey doesn't have it in develop yet, and this is a common practice in general
the fix is out, but you need to give instances time to migrate
sure an attacker can read the fix and figure out what the issue was, but by disclosing it and showing a PoC you make it much easier
@r0se @fiore its not in the development branch but im pretty sure it's in stable
merge: Coordinated Security Release: Part 2 (!1275) (fd36256b) · Commits · TransFem.org / Sharkey · GitLab

View MR for information: https://activitypub.software/TransFem-org/Sharkey/-/merge_requests/1275

GitLab
misskey-dev/misskey

🌎 A completely free and open interplanetary-microblogging platform 🚀 - misskey-dev/misskey

GitHub
@r0se @fiore i think the new comments make this pretty clear lmao