Blaze

As you seem knowledgeable about the security hardening process, could you maybe try to help Piefe on that topic?

The development team is small and could probably use some help

Makes sense, thank you!

You can look at codeberg.org/rimu/pyfedi/releases/tag/v1.6.25 to see the changes.

Basically, the 0-day was mostly someone running an LLM and trying to discover vulnerabilities without double checking them. Most of the things reported were not applicable (mentioning functions that don’t even exist), others were not applicable but led to some tangent hardening.

Lemmy also had a SSRF vulnerability a month ago: github.com/LemmyNet/lemmy/…/GHSA-q537-8fr5-cw35

Thank you!