Post #4231937
2026-07-30 07:34 UTC
@galaxis@mastodon.infra.de looks like mastodon is not affected because they had vips version and support blocking untrusted media and blocking is enabled
https://github.com/mastodon/mastodon/blob/ae4f80ee5721465dc55a08b70a9792e9db763459/config/initializers/vips.rb#L29
Replies (1)
-
@galaxis@mastodon.infra.de 2026-08-01 19:46
@alex@feed.yopp.me More details on this attack now: https://discuss.rubyonrails.org/t/cve-2026-66066-attack-details-and-tools-to-perform-a-forensic-investigation/91441