Skip Navigation

[Meta] Lemmy.world (and some others) were hacked - LemmyWorld

lemmy.world Lemmy.world (and some others) were hacked - LemmyWorld

While I was asleep, apparently the site was hacked. Luckily, (big) part of the lemmy.world team is in US, and some early birds in EU also helped mitigate this. As I am told, this was the issue: - There is an vulnerability which was exploited - Several people had their JWT cookies leaked, including a...

There is some information about a vulnerability in the Lemmy frontend.

So I have questions for the SDF mods and admins.

  • Has this affected our instance in any way?
  • Has the fix been applied to our frontend?

Or is our instance like the Elusive Joe, and we're not so big yet that we're worth hacking?

8

You're viewing a single thread.