Instance Owners: Do Not Use Lemmy-Thumbnail-Cleaner (biglemmowski.win)

submitted 2 months ago* (last edited 2 months ago) by [email protected] to c/[email protected]

2 comments fedilink hide all child comments

cross-posted from: https://biglemmowski.win/post/1465956

If you are using https://github.com/wereii/lemmy-thumbnail-cleaner please stop and disable it as soon as possible.

We have found a security issue that allows any user to make LTC delete any locally hosted image.

I will be posting more details soon and editing this to include the information.

E: https://github.com/wereii/lemmy-thumbnail-cleaner/issues/10

top 2 comments

sorted by: hot top controversial new old

[-] [email protected] 6 points 2 months ago