@opentermsarchive@mastodon.social
2026-10-23 13:37 UTC
💣 Critical Node.js vulnerability (CVE-2026-111497 #Node2Shell): Open Terms Archive updates collections or suspends API, reusers should do the same ASAP.
If you operate a collection with engine v7.2.1 or above (released Sept 2025) and deploy with the recommended `OpenTermsArchive/deployment` package, you simply need to run the deployment again to automatically upgrade to a patched, secure version of Node and can continue running as usual.
For other cases, guidance is on https://community.opentermsarchive.org
Replies (0)
No replies.