New "security" tag

[amolith]

It would be helpful if there was a security tag for posts like this

Another vector for the injection vulnerability found

See Pleroma/Soykaf As you all probably know (if not, see the comments in https://meta.akkoma.dev/t/akkoma-stable-2023-05-baked-beans-and-spam/475/8), there has recently been discovered an injection vulnerability in Akkoma-fe. Both Pleroma and Akkoma are affected by it. Some fixes have already been done do mitigate this issue, but yet another attack vector has been found. From what I understand, the vulnerability allows remote code execution with code being injected through media. When that med…

so admins can use Discourse’s watch feature to receive email notifications for security-related posts.