Edit: see pinned comment for update

Hello All,

Due to the incredibly irresponsible disclosure of a security vulnerability for Piefed, we’ve had to take Piefed.zip offline until a fix can be put in place.

I’ll update more once I have more information.

Many thanks

Demigodrick

  • Demigodrick@lemmy.zip
    shield
    OPM
    link
    fedilink
    English
    arrow-up
    29
    ·
    1 month ago

    Update: there are additional reported vulnerabilities that I have been made aware of.

    These have been shared with the Piefed Dev but no fixes yet in place.

    Given this knowledge and the fact these exploits could be used to target vulnerable users and potentially access account data, I feel it is sensible to keep the instance offline until further fixes are in place.