Instance Owners: Do Not Use Lemmy-Thumbnail-Cleaner (biglemmowski.win)

submitted 3 months ago* (last edited 3 months ago) by taaz@biglemmowski.win to c/lemmy_support@lemmy.ml

2 comments fedilink hide all child comments

cross-posted from: https://biglemmowski.win/post/1465956

If you are using https://github.com/wereii/lemmy-thumbnail-cleaner please stop and disable it as soon as possible.

We have found a security issue that allows any user to make LTC delete any locally hosted image.

I will be posting more details soon and editing this to include the information.

E: https://github.com/wereii/lemmy-thumbnail-cleaner/issues/10